Newspaper  $5.00 


pirpr  QA  QTP  Security  is  a  critical  piece  of  the  IP  standards 
-  rlLuL  InM  I  u  puzzle,  says  security  analyst  Dave  Norton.  Page  20. 


V  E-MAIL  METERING 


The  U.S.  Department  of  Transportation’s  George  Ramick  funds 
his  operations  through  a  unique  chargeback  system.  Page  49. 
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Breaking  news  and  more:  www.nwfusion.com 


On  Jan.  19,  we  stationed  reporters 
at  key  Internet  junctions  around  the 
globe  to  find  out  just  what  it  takes 
to  keep  the  'Net  humming. 

BY  IDG  NEWS  SERVICE  AND 
NETWORK  WORLD  STAFF 

nearly  midnight  and  Internet  traffic  in  Japan 
is  spiking. Yashushi  Sano,  the  man  responsible 
for  keeping  Japan’s  part  of  the  Internet 
backbone  running,  joins  the  online  flurry  of 
activity  as  he  checks  e-mail  and  chats  with 
friends  from  his  home  in  Yokohama. 

At  that  same  moment  thousands  of  miles  away,  Franck 
Simon  is  monitoring  midafternoon  Internet  activity  from 
his  office  in  Paris.  Meanwhile,  Mike  Carroll  settles  in  for  the 
day  at  one  of  the  busiest  Internet  exchanges  in  the  world 
after  battling  rush  hour  traffic  outside  of  Washington,  D.C. 

Welcome  to  the  global  Internet,  where  an  unsung  cadre 
of  network  managers  keeps  traffic  on  the  order  of  multiple 
gigabits  per  second  moving  smoothly  around  the  world. 

See  Day  in  the  life,  page  41 
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Rows  of 
routers  at 
MCI  WorldCom's 
San  Jose  NAP. 
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to  direct  heavy  Nortel  crafts 

Catalyst  killer 

SCHREIER  HOHMAN  - 


SANTA  CLARA,  CALLF.  —  Two 
of  the  big  four  internetwork 
equipment  makers  already  have 
some  kind  of  load-balancing 
strategy.  Nortel  Networks  will 
make  it  three  when  the  firm  an¬ 
nounces  plans  to  resell  load  bal¬ 
ancers  from  EPivot  under  a  rela¬ 
tionship  that  could  eventually 
See  Nortel,  page  60 
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•  See  how  different  load¬ 
balancing  methods  work. 


•  Take  a  look  at  load-balancing 
offerings  from 
several  vendors. 
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Accelar  upgrade  guns  for  Cisco’s  biggest  switch. 


BY  JIM  DUFFY 

SANTA  CLARA,  CALLF.  — 
Nortel  Networks  later  this 
month  is  expected  to  unveil  its 
next-generation  routing  switch, 
which  sources  say  will  give 
Cisco’s  backbone  Catalyst 
8540  a  run  for  its  money. 

Nortel  will  roll  out  the 
Accelar  8000,  a  10-slot  switch 
that  will  support  frame  and 
ATM  cell  switching  for  LANs 
and  WANs,  sources  say.  The 
Accelar  8000  will  also  support 
Layer  2  and  Layer  3  switching, 
and  is  designed  for  high-densi¬ 
ty  10/100M  bit/sec  and  Gigabit 
Ethernet  aggregation  in  the 
core  of  enterprise  networks. 

“We’re  starting  to  transition 


our  wiring  closets  to  gigabit, 
and  we  really  need  something 
with  higher  density  in  the 
core,”  says  Miguel  Corteguera, 
assistant  director  for  college 
network  services  at  Miami- 
Dade  Community  College  in 
Miami,  who  uses  Nortel’s  cur¬ 
rent  generation  of  Accelar 
switches.  “We’re  also  building 
an  ATM  WAN,  but  we  plan  to 
keep  gigabit  at  the  core  of  the 
LAN  at  each  campus.” 

Currently,  Nortel’s  top-of- 
the-line  Layer  3  campus  switch 
is  the  Accelar  1200,  an  eight- 
slot,  7G  bit/sec  frame-only 
switch.  The  Accelar  1200  sup¬ 
ports  up  to  96  10/100M 
bit/sec  Ethernet  ports  and  12 
See  Accelar.  page  60 


DSL  has  a  DLS  (dirty  little  secret) 


BY  TIM  GREENE 

If  you  believe  the  vendor 
hype,  you  might  think  digital 
subscriber  line  (DSL)  delivers 
guaranteed  dedicated  band¬ 
width.  But  it’s  not  quite  that 
simple. 

DSL  service  that  starts  out  at 
1.5M  bit/sec  at  your  site  isn’t 
typically  run  at  that  band¬ 
width  all  the  way  through  the 
DSL  carrier’s  network.  Rather, 
your  line  contends  with  other 
customers’  DSL  links  for  a 
shared  pipe  into  the  carrier 
network. 


It  is  possible  to  buy  a  full 
bandwidth  link  all  the  way 
through  the  DSL  carrier  net, 
but  be  prepared  to  pay  a  pre¬ 
mium  and  to  negotiate  service- 
level  agreements  (SLA)  to 
ensure  performance. 


In  the  growing  battle  to  sell 
inexpensive  high-speed  access 
pipes,  DSL  partisans  claim  their 
technology  is  better  than  cable 
modems  because  it  offers  dedi¬ 
cated  bandwidth,  while  cable  is 
See  DSL,  page  59 


To-do  list  for  DSL  buyers 

When  you  buy  digital  subscriber  line  services: 

•  Be  aware  of  potential  bottlenecks  and  ask  for  a  service-level  agreement. 

•  Understand  exactly  what  portions  of  the  network  the  SLA  covers. 

•  Ping  the  network  to  get  a  sense  of  true  throughput. 


“A  broker  in  Cincinnati  needs  help  with  her  PC;  she 
headquarters  in  Louisville  and  says,  ‘How  soon  can 
‘Right  now,  that’s  me  moving  your  mouse.’” 


BE  DIRECT" 

D&LL 

www.dell.com 


For  Year  2000  information  about  Microsoft  products  see  www.microsoft.com/year2000/  or  call  1-888-MSFT-Y2K.  For  Year  2000  information  about  Dell  PowerEdge  servers  and  Dell  OpenManage  systems  management  solutions  see 
www.dell.com/year2000/. 

©1999  Microsoft  Corporation.  All  rights  reserved.  Microsoft,  the  Windows  logo  and  Windows  NT  are  either  registered  trademarks  or  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries. 

Other  product  and  company  names  mentioned  herein  may  be  the  trademarks  of  their  respective  owners. 


calls 

you  be  here?’  I  say, 


“Moving  cursors  in  faraway  places  is  great,  but  there’s  more 
to  the  centralized  management  we  get  with  Microsoft® 
Windows  NT®  on  Dell®  PowerEdge®  servers.  Like  last  night  we 
were  sitting  right  here,  but  we  checked  Y2K  readiness  on 
our  desktops  in  Evansville.  To  get  started,  we  did  a  remote 
inventory  with  Systems  Management  Server,  and  we  used 
Dell  OpenManage'to  dig  a  little  deeper  on  the  hardware 
side.  It’s  surprisingly  easy.  Lately,  the  only  reason  for  me 
to  leave  Louisville  is  vacation.” 


Jeff  Polsgrove,  CTO 

Hilliard  Lyons  Investments 


Windows  NT 

Server  4.0 


www.microsoft.com/go/Qa505tudy/Manageability 


Microsoft 


Gateway  custom-builds  entry-level  ALR  workgroup  servers,  mid-range  ALR  department  servers  and  enterprise 
ALR  workhorses.  We’re  committed  to  safeguarding  your  critical  data  with  industry-leading  manageability, 
improved  scalability  and  maximum  flexibility.  Let  us  build  an  ALR  Series  server  for  you. 


ALR®  7000  Series 
Workgroup  Servers 

Ideal  for  both  startup  companies  and 
power-hungry  workgroups,  the  ALR  7 
Series  offers  big  server  features  at  a  s 
price.  With  advanced  processor  power,  integrated  I/O 
technology  and  built-in  server  management  features, 
these  systems  deliver  incredible  power  and  flexibility. 
An  easy  and  cost-effective  upgrade  path  includes  dual 
processing  and  redundant,  hot-swappable  storage. 

•  ALR  7200  Pentium®  II  processor-based  server 
(dual-processor  ready)  Starting  at  $2399 

•  ALR  7300  Pentium  II  Xeon™  processor-based  server 
(dual-processor  ready)  Starting  at  $3999 


ALR  8000  Series 
Department  Servers 

Our  ALR  8000  Series  improves  mid-range 
server  performance  with  extraordinary 
expansion  capabilities  and  dual-processing 
power  support.  Vast  storage  with  up  to  12 
hot-swappable  hard  drives  makes  the  8000  Series  perfect 
when  data  access  is  at  a  premium.  Plus,  advanced  fault- 
tolerant  capabilities  include  an  error  correction  memory 
subsystem,  and  redundant,  hot-swappable  power  supplies. 

•  ALR  8200  Pentium  II  processor-based  server 
(dual-processor  ready)  Starting  at  $3799 

•  ALR  8300  Pentium  II  Xeon  processor-based  server 
(dual-processor  ready)  Starting  at  $5399 


ALR  9000  Series 
Enterprise  Servers 

When  you  need  maximum  power  and 
performance  that’s  highly  available, 
the  ALR  9200  is  the  obvious  solution.  Up  to  four 
Pentium  II  Xeon  processors  deliver  incredible  data 
throughput  at  a  low  cost  per  transaction  on  this 
high-end,  enterprise  server.  All  this  technology  is 
packed  into  a  remarkably  small  tower  or  7U  Rack- 
optimized  chassis  with  lockable  covers  and  a  locking 
front  panel. 

•  ALR  9200  Pentium  II  Xeon  processor-based  server 
(four-way  processor  ready)  Starting  at  $7999 


pentiurrrlf 
xeon -i 

PROCESSOR  } 


Every  Gateway  client  is  unique, 
and  so  is  every  Gateway™  ALR  Series  server. 

Call  and  tell  us  what  we  can  build  for  you. 

1-888-888-0779 

www.gateway.com/corp 
ad  code: 11047 


Get  more  out  of  the  boxJM 


All  Gateway  Celeron',  Pentium,  Pentium  Pro,  Pentium  II  and  Pentium  II  Xeon  processor-based  systems  are  qualified  to  carry  the  “NSTL  Hardware  Tested  Year  2000  Compliant"  logo  because  they  have  successfully  completed  the  NSTL  YMARK2000  test.  These  systems  have 
also  passed  the  Microsoft  Millennium  year  2000  test  suite.  Gateway  cannot  be  responsible  for  any  bundled  software  that  improperly  sets,  resets,  or  calculates  dates.  These  issues  are  not  related  to  the  hardware  and  operating  system,  and  cannot  be  corrected  by  Gateway, 

©1999  Gateway  2000,  Inc.  All  rights  reserved.  Gateway,  ALR,  the  ‘Get  more  out  of  the  box"  slogan  and  the  Gateway  stylized  logo  are  trademarks  or  registered  trademarks  of  Gateway  2000,  Inc.  The  Intel  Inside  Logo,  Intel  and  Pentium  are  registered  trademarks,  and  Celeron 
and  Pentium  II  Xeon  are  trademarks  of  Intel  Corporation.  All  other  brands  and  product  names  are  trademarks  or  registered  trademarks  of  their  respective  companies.  Some  products  and  sen/ices  may  not  be  available  for  all  international  locations.  Many  Gateway  products  are 
engineered  to  Gateway  specifications,  which  may  vary  from  the  retail  versions  of  the  software  and/or  hardware  in  functionality,  performance  or  compatibility.  All  prices  and  configurations  are  subject  to  change  without  notice  or  obligation.  Prices  do  not  include  shipping  and 
handling  and  any  applicable  taxes.  ALR  Series  servers  meet  FCC  Class  A  emission  standards.  FCC  Class  A  products  may  not  be  sold  for  home  use. 

Free  Product  info  enter  NWInfoXpress  #6  online  @  www.networkworld.com/infoxpress 
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ONLINE 


ISP  surcharges?  What  do  you  think 
of  the  FCC's  ruling  last  week  that 
calls  to  ISPs  are  interstate  in 
nature?  Will  it  change  the  Inter¬ 
net?  We've  set  up  a  forum  to  dis¬ 
cuss  it.  You  can  also  get  back¬ 
ground  information  on  the  case. 
DocFinder:  1752 

GA  day  in  the  life  of 
the  Internet.  Read 
our  front-page 
story  on  the  topic, 
then  come  online 
to  discuss  how 
the  Internet  really 
works  with  Dan  Lasater,  MCI 
WorldCom's  director  of  broadband 
applications  and  architect  of  the 
company's  metropolitan-area 
exchanges.  We've  set  up  a  spe¬ 
cial  forum  this  week  where  you 
can  pose  your  questions  to  him 
and  read  his  comments. 

DocFinder:  1743 

Print  this.  Want  to  print  out  a  copy 
of  a  Fusion  article?  This  week,  we 
start  adding  a  cgi-bin  script  to  our 
stories  and  documents  that  will 
produce  printer-friendly  versions. 
Look  for  the  printer  icon  at  the  top 
of  articles. 

New  resources.  We've  added  a 
number  of  ATM  papers  to  our  Net 
Resources  area  and  an  entire  page 
of  FDDI  links.  DocFinder:  1750 

New  file  uploads.  Every  week,  we 
get  several  new  demonstration 
and  evaluation  applications  added 
to  our  Download  area.  This  week, 
we've  added  several  Web  servers. 
Check  out  the  What's  New  page 
to  see  any  you  might  have  missed. 
DocFinder:  1751 

What's  on  your  bookshelf?  Several 
readers  responded  to  last  week's 
request  for  help  on  coming  up  to 
speed  on  network  technologies. 
Come  online  to  see  what  they  rec¬ 
ommended,  and  add  your  own 
ideas.  DocFinder:  1642 


How  to  get  onto 
Network  World  Fusion 

Click  on  Register  on  the  home  page 
and  follow  the  instructions. 
Subscribers,  keep  your  NWF  number 
—  highlighted  on  the  front  cover's 
mailing  label  —  handy  during 
registration.  Nonsubscribers 
must  fill  out  an  online 
registration  form. 
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On  Jan.  19,  we  stationed 
reporters  at  eight  net¬ 
work  access  points 
around  the  globe  to  find 
out  just  what  it  takes 
to  keep  the  Internet 
humming.  Page  1. 
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REVIEW:  Vascos 

VACMan/Server  3.0  proves 
its  mettle  in  our  look  at  four 
security  server/hardware 
token  combos:  Page  47. 
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NEWS  BRIEFS,  MARCH  1,  1999 


FCC  opens  door  a  crack  for 
Internet  usage  fees 

For  the  first  time,  the  Federal  Communi¬ 
cations  Commission  has  moved  away  — 
ever  so  slightly  —  from  its  long-standing 
policy  that  telephone  companies  cannot 
charge  ISPs  telephony-style  per-minute 
access  fees.  Users  have  feared  those  kinds  of 
fees  would  force  ISPs  to  at  least  partly 
charge  by  usage  for  dial-up  connections,  just 
as  long-distance  phone  calls  ring  up  per- 
minute  bills. 

The  FCC  last  week  ruled  that  ISP  dial¬ 
up  connections  are  not  really  local  calls 
but  basically  the  same  as  long-distance 
connections  because  the  user’s  goal  is 
to  reach  a  distant  Web  site.  Yet  at  the 
same  time,  the  FCC  said  that  existing 
agreements  among  regional  Bell  operating 
companies,  competitive  local  exchange 
carriers  and  ISPs  that  treat  Internet  access 
traffic  as  local  calls  must  remain  in  place. 

The  FCC  insisted  that  this  means  Internet 
access  will  remain  free  of  per-minute  charges 
for  now.  But  a  dissenter  —  Republican 
Commissioner  Harold  Furchtgott-Roth  — 
warned  that  RBOCs  may  eventually  use  the 
decision  to  level  access  fees  on  ISPs. 
BellSouth,  for  one,  released  a  statement  say¬ 
ing  it  will  decide  what  to  do  after  examining 
the  full  ruling. 


Virginia  to  spammers:  Go  ahead, 
make  my  day 

If  you  spam  in  Virginia,  be  prepared 
to  pay  a  price.  Virginia  Gov.  James  Gilmore 
last  week  said  he  will  sign  legislation 
that  lets  prosecu¬ 
tors  pursue  junk 


I  m 


e-mailers  and  gives 
Virginia  e-mail  pro¬ 
viders  the  right 
to  collect  damages 
from  spammers. 

The  law  would 
make  serious  spam¬ 
ming  incidents  a 

felony  punishable  by  fines  or  jail,  and  would 
give  service  providers  or  individual  e-mail 
users  the  chance  to  seek  civil  penalties. 

Under  the  statute,  e-mail  companies 
could  seek  civil  penalties  of  $10  per  mes¬ 
sage  or  $25,000  per  day. 

The  antispam  legislation  also  targets  the 
anonymity  and  fake  identities  to  hide  the 
source  of  bulk  e-mail.  Under  the  law,  it 
would  be  illegal  to  own  software  that  helps 
people  hide  their  online  identities. 

Industry  experts  say  the  Virginia  law 
could  have  a  big  impact  because  so  many 
Internet  companies  are  based  there: 
America  Online,  CompuServe,  PSINet 
and  MCI  Worldcom’s  Internet  group,  to 
name  a  few. 

California  is  the  only  other  state  that  has 
criminalized  spam  activities. 


Big  Blue  not  afraid  of  Y2K  winter 

The  Year  2000  computer  problem  isn’t 
likely  to  cause  a  “digital  winter”  that  will 

disrupt  the 

entire  world, 
IBM  CEO  Louis 
Gerstner  said 
last  week  at 
the  company’s 
Business  Part¬ 
ner  Executive 
Conference. 
But  Gerstner 
hedged  his 

bet  a  bit  by  say¬ 
ing,  “Nobody 
knows  exactly 
what  will  hap¬ 
pen  311  days 
from  now  — 
it’s  likely  we  will  see  some  disruptions  but 
nothing  on  the  order  of  the  dire  forecasts  that 
some  have  predicted.”  Gerstner  made  it  clear 
that  he  is  concerned  about  small  businesses, 
which  seem  less  prepared  for  the  rollover  to 
the  year  2000  than  large  companies.  “What 
we  can’t  do  is  sit  back  on  our  heels  and  see 
which  way  the  ball  bounces,”  he  said. 

Alive  and  kicking 

WTtile  it  just  missed  Wall  Street  expecta¬ 
tions,  Novell  last  week  reported  its  sixth 
consecutive  profitable  quarter. 

For  the  first  fiscal  quarter  ended  Jan.  31, 
profits  more  than  doubled  to  $29  million 
from  $14  million  in  the  first  quarter  last  year. 
Revenue  rose  13%  to  $286  million  from  $252 
million  in  the  first  quarter  last  year.  CEO  Eric 
Schmidt  says  sales  of  directory-enabled  prod¬ 
ucts  accounted  for  88%  of  total  revenue  in 
the  quarter.  Revenue  from  NetWare  4.X  and 
5.0  servers  totaled  $  146  million,  up  16%  from 
the  first  quarter  of  1998.  Revenue  from  net¬ 
work  applications,  such  as  GroupWise 
collaboration  software,  Manage  Wise  and 
ZENworks  management  software,  increased 
50%  compared  to  the  first  quarter  of  last  year 
to  $53  million.  Infrastructure  products,  such 
as  BorderManager  and  NDS  for  NT,  con¬ 
tributed  $15  million  in  first-quarter  revenue, 
up  68%  from  the  year-earlier  period. 

Losing  my  assistants 

AT&T  Chairman  C.  Michael  Armstrong  last 
week  lost  a  key  deputy  as  Robert  Annunziata, 
president  of  the  carrier’s  business-services 
group,  quit  to  join  a  new  international 
carrier  as  CEO.  Before  AT&T,  Annunziata  was 
CEO  of  Teleport  Communications  Group,  a 
competitive  local  exchange  carrier  that 
AT&T  bought  last  year.  Armstrong  installed 
Annunziata  ahead  of  AT&T  lifers  to  kick  the 
carrier’s  fast-packet,  IP  and  voice  offerings 
into  high  gear.  Annunziata  is  joining  Global 
Crossing,  Ltd.,  a  high-speed  transport 
provider  mostly  serving  other  carriers. 


IBM's  Gerstner:  Some  Y2K 
disruptions  are  likely,  but 
nothing  dire. 


Microsoft  maps  out 
e-comm  strategy 


BY  CHRISTINE 
BURNS  AND 
ELLEN  MESSMER 

SAN  FRANCISCO  —  Micro¬ 
soft  has  lined  up  its  big  guns 
to  tout  the  company’s  elec¬ 
tronic  commerce  strategy  this 
week. 

Reminiscent  of  the  high- 
profile  media-circus  event  of 
1993,  when  the  company  offi¬ 
cially  embraced  the  Internet, 
Microsoft  CEO  Bill  Gates  and 
President  Steve  Ballmer  will 
appear  on  the  same  San 
Francisco  stage  Thursday  to 
outline  a  cohesive  e-com- 
merce  strategy. 

Gates  and  Ballmer  are 
expected  to  sketch  out  how  a 
future  version  of  Microsoft’s 
Site  Server  3.0  Commerce 
Edition  will  run  on  top  of 
Windows  2000  and  tap  into 
Windows’  new  Active  Direct¬ 
ory,  as  well  as  public-key  infra¬ 
structure  and  high-availability 
features.  The  event  will  also 
showcase  a  number  of  cus¬ 
tomers  who  have  anchored 
their  e-commerce  deploy¬ 
ments  with  Microsoft’s  Win¬ 
dows  NT-based  Site  Server  3  0 
Commerce  Edition  platform, 
Internet  Information  Server 
4.0  Web  server  and  SQL  Server 
7.0  database. 

While  Microsoft  refused  to 
disclose  any  further  details, 
users  were  quick  to  point  out 
several  areas  where  the  com¬ 
pany’s  approach  to  e-com¬ 
merce  needs  work.  They  say 
Microsoft’s  existing  storefront 
software  is  unattractive  and 
difficult  to  customize.  Some 
users  also  feel  Microsoft’s 
e-commerce  back-end  needs 
to  be  more  scalable,  offer  bet¬ 
ter  support  for  data  warehous¬ 
ing  and  provide  better  ties  to 
Microsoft  Transaction  Server. 

When  Site  Server  3.0  Com¬ 
merce  Edition  shipped  last 
summer,  Microsoft  positioned 
it  as  an  out-of-the-box  store¬ 
front  for  corporations  and  a 
platform  upon  which  vendors 
could  build  their  own  elec¬ 
tronic  procurement  wares. 
Users  say  Microsoft  may  have 
tried  to  do  too  much  by  offer¬ 
ing  the  same  product  to  both 


audiences. 

Microsoft’s  automated  tool 
—  referred  to  as  a  wizard  —  is 
universally  derided  for  creating 
an  instant  storefront. 

“It’s  ugly,  and  you’d  be  nuts 
to  use  it,”  says  Andrew  Brust,  a 
New  York  software  developer 
and  president  of  Progressive 
Systems  Consulting. 

“There  are  a  bunch  of  holes 
in  the  wizard;  for  example,  it 
can’t  do  e-mail  confirmation,” 
claims  Joe  Kuzma,  a  Washing¬ 
ton,  D.C.  Web  designer.  “The 
main  problem  is  you  have  to 
rewrite  a  lot  of  the  code  in  the 
wizard.” 

The  wizard  is  there  to  “help 
people  get  started,”  says  David 
Roth,  president  of  Stratis 
Group,  a  Murray  Hill,  N.J.,  inte¬ 
grator  specializing  in  e-com¬ 
merce.  “But  people  are  finding 
the  wizard  isn’t  the  answer 
and  that  changing  the  code 
behind  it  is  a  problem.  So  the 
wizard  is  a  throwaway” 

On  the  back  end,  though, 
Roth  says  Site  Server  3.0 
Commerce  Edition  does  have 
some  very  useful  features, 
such  as  the  application-to- 
application  data  interchange 
pipelines  that  handle  things 
such  as  order  handling  and  tax 
calculation. 

Microsoft  could  improve 
upon  these  interchange  pipe¬ 
lines  by  adding  hooks  to  its 
Microsoft  Transaction  Server, 
users  say.This  would  ensure  the 
integrity  of  transactions,  such  as 
the  processing  of  customer 
orders  on  the  back-end.  3 


Net  Know-It-All 


For  the  answer  to  this  week's  question  and 
more  net  trivia,  visit  Network  World  Fusion 
and  enter  2349  in  the  DocFinder  box. 


This  week's  question: 

What  is  the  Abilene 
Project? 


www.nwfusion.com 
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PROACTIVE  SERVER  HEALTH  MONITORING 


A 

KEEPING 
YOUR  COOL 


Why  run  around  putting  out  fires,  when  you  can  pre-empt  them  altogether  from  your  desk?  (Or  anywhere  via  the  web.)  Seagate  Manage  Exec 
proactively  monitors,  analyzes,  and  reports  on  Windows  NT  and  Novell  NetWare  systems’  health,  alerting  you  to  problems  before  users  are  impacted. 


©1998  Seagate  Software.  Inc.  Seagate  Manage  Exec.  Seagate  Software  and  the  Seagate  logo  are  trademarks  of  Seagate  Technology.  Outside 


Free  Product  info  enter  NWInfoXpress  #7  online  @  www.networkworld.com/infoxpress 


News 


Dell  pounds  out  a  SAN 


BY  DENI  CONNOR 

Earlier  this  year  Dell  dipped 
its  toes  into  the  storage-area 
network  (SAN)  waters  by 
agreeing  to  OEM  host  bus 
adapters  from  QLogic. 

Last  week  the  company 
dove  ail  the  way  in  with  a  low- 
cost  SAN  plan  for  Windows 
NT  networks,  and  some  ana¬ 
lysts  are  claiming  that  Dell’s 
strategy  is  one  of  the  most 
complete  of  any  server  vendor 
to  date. 

Dell’s  PowerVault  is  a  line 
of  home-grown  and  OEMed 
SAN  gear  that  includes  Fibre 
Channel,  backup,  and  security 
and  authentication  products, 
all  for  Windows  NT. 

The  Dell  eight-port  Fibre 
Channel  switch,  the  Power- 
Vault  50F,  will  cost  about 
$1,350  per  port.  Pricing  for 
the  Fibre  Channel  Multiport 
bridge  starts  at  $5,000.  The 
fiber-optic  host  bus  adapter’s 
price  starts  at  $1,479- 

Dell  also  announced  a  set  of 
service  and  integration  pro¬ 
grams  to  supplement  its  SAN 
package. According  to  analysts, 
integration  and  interoperabili¬ 
ty  have  been  two  of  the  stick¬ 
ing  points  for  wide-scale  SAN 
adoption. 


In  its  target  market,  NT, 
“Dell’s  SAN  is  a  credible  threat 
to  other  vendors’  SAN  imple¬ 
mentations.  By  introducing  a 
low-cost  SAN,  they’ve  present¬ 
ed  a  real  value,  which,  unlike 


other  vendors’  products,  is 
available  now,”  says  John 
McArthur,  program  director  of 
Storage  Systems  Research  at 
International  Data  Corp.  in 
Framingham,  Mass. 

McArthur  is  also  impressed 
with  the  service  plan.  “The 


company  has  great  technical 
support,  and  with  their  trained 
storage  specialists,  can  deliver 
integration  services  that  are 
critical  to  customers,”  Mc¬ 
Arthur  says. 


The  Dell  SAN  lets  up  to  four 
Dell  PowerEdge  servers  share 
a  single  PowerVault  650F  stor¬ 
age  subsystem  and  a  Power- 
Vault  130T  digital  linear  tape 
library,  allowing  high-speed 
storage  and  backup.  Dell  will 
work  with  Computer  Asso¬ 


ciates,  Legato, Tivoli/ADSM  and 
Seagate  on  network  backups. 

By  working  with  Microsoft, 
Dell  has  eliminated  a  nettle- 
some  NT  feature.  Windows  NT 
servers  by  nature  think  they 
own  access  to  any  device  they 
can  see.  In  the  case  of  SANs,  in 
which  multiple  servers  may 
share  a  common  drive,  this 
presents  a  conflict. 

To  solve  it,  Dell  and 
Microsoft  built  Dell  Open- 
Manage  Storage  Consoli¬ 
dation  software,  which  lets 
individual  NT  servers  own 
certain  portions  of  a  disk  sub¬ 
system.  Microsoft  will  build 
this  technology  into  Windows 
2000. 

Dell  will  OEM  various  com¬ 
ponents  of  the  SAN.  The  com¬ 
pany  chose  Crossroads  Sys¬ 
tems’  Fibre  Channel-to-dual- 
SCSI  bridge  and  Brocade’s 
Silkworm  switch  as  the  links 
between  the  network  and  the 
storage  device.  The  company 
also  announced  an  OEM  agree¬ 
ment  with  Network  Appli¬ 
ance,  which  will  release  net- 
work-attached  storage  data 
servers  later  this  year. 

Also  as  part  of  its  SAN 
announcement,  Dell  says  it  is 
expanding  its  technical  con¬ 
sulting  services  to  offer  stor¬ 
age  planning  and  storage  con¬ 
solidation  and  performance,  as 
well  as  backup  and  recovery. 
These  services  will  be  avail¬ 
able  in  May.  3 


Deli's  Windows  NT  SAN 

Under  Dell's  system,  servers  will  talk  to  Fibre  Channel  switches 
that  write  data  to  shared  storage  devices,  A  DLT  library  will  serve 
as  backup. 

PowerVault  650F 
storage  system 


LAN 


PowerVault 
35F  Fibre 
Channel  Multi 
port  bridge 


Note:  All  PowerEdge  servers  run  Windows  NT 


Oracle  joins  the  directory  race 

Offers  service  for  corporate  users,  carriers,  ISPs. 


BY  CHRISTINE 
BURNS 

REDWOOD  SHORES,  CALIF. 
—  In  an  effort  to  give  cus¬ 
tomers  a  single  place  to  store 
user  information  for  all  com¬ 
mercial  and  custom-built 
Oracle8i  database  applications, 
Oracle  last  week  announced  its 
own  standards-based  central¬ 
ized  directory  service. 

The  Oracle  Internet  Direct¬ 
ory  is  a  Lightweight  Directory 
Access  Protocol  (LDAP)  Ver¬ 
sion  3-compliant  directory 
designed  to  hold  user  names, 
passwords  and  access  rights. 
Currently,  each  Oracle8i  ap¬ 
plication  requires  its  own 
directory'. 

The  new  directory  is  a  back¬ 
end  service  that  uses  an 


Oracle8i  database  as  its  data 
store.  It  can  run  on  any  server 
operating  system  that  supports 
Oracle8i  databases,  including 
Windows  NT  and  most  flavors 
of  Unix.  Any  application  writ¬ 
ten  to  the  LDAP  API  or  any 
LDAP  Version  3  client  can 
access  information  stored  in 
the  directory. 

The  directory  gives  adminis¬ 
trators  a  single  place  for  con¬ 
trolling  end-user  access  to  any 
Oracle-based  applications.  With 
the  software,  users  have  to  log 
on  just  once  for  all  Oracle8i 
applications. 

Houston  Community  Col¬ 
lege  in  Texas  beta-tested  the 
directory  as  the  central  user 
information  store  for  its 
Oracle8i-based  internal  e-mail 
system  and  its  Internet  mail 


service.  “It’s  important  for  the 
5,000  students  and  instruc¬ 
tors  to  have  access  to  both  of 
those  network  services,  but 
managing  user  rights  sepa¬ 
rately  was  a  real  hassle,”  says 
Annette  Hearn,  senior  systems 
administrator. 

Managing  user  access  via  the 
directory  has  worked  so  well 
that  Hearn  is  planning  to  make 
it  the  central  directory  for  the 
college’s  human  resource,  stu¬ 
dent  tracking  and  financial 
applications,  as  well. 

Oracle  officials  claim  the 
company’s  new  directory  soft¬ 
ware  can  hold  up  to  500  mil¬ 
lion  objects  and  support  tens 
of  thousands  of  simultaneous 
users.  Industry  analysts  say  the 
product  is  as  scalable  as  any 
other  directory  on  the  market. 

Oracle’s  directory  is  avail¬ 
able  now  in  two  versions  — 
one  targeting  the  enterprise 
market  and  one  better  suited 
for  ISPs  and  telcos  that  want  to 
host  directory-enabled  Inter¬ 
net  applications.  Oracle  will 


charge  for  end  users  inside  the 
firewall  on  a  per-seat  basis. The 
Internet  version  will  be  priced 
based  on  the  number  of  entries 
in  the  directory.  Exact  pricing 
was  not  available  at  press  time. 

Oracle  also  announced  an 
agreement  with  Novell  in 
which  the  two  will  integrate 
Oracle’s  directory  with  Novell 
Directory  Services  (NDS).  The 
companies  will  first  offer  sin¬ 
gle  sign-on  capabilities 
between  the  two  services  and 
will  offer  a  single  administra¬ 
tion  model  at  a  later  date.  The 
companies  say  they  will  also 
make  NDS  run  natively  on 
Oracle8i. 

Oracle  and  Novell  will  com¬ 
pete,  however,  for  the  large- 
scale  ISP  and  telco  directory 
contracts.  Novell’s  next  version 
of  NDS  —  dubbed  scalable 
NDS  (SCADS)  —  is  supposed  to 
be  better  suited  for  these 
demanding  environments  than 
previous  renditions  of  the 
directory. 

Oracle:  (650)  506-7000 


Networidltold 

Editor  in  Chief:  John  Gallant 
Editor:  John  Dix 

NEWS 

News  Editor:  Doug  Barney 
News  Director:  Bob  Brown 
Associate  News  Editor:  Michael  Cooney 
(508)  875-6400 

NETWORK  WORLD  FUSION 

Online  Editor:  Adam  Gaffin,  (508)  820-7433 
Senior  Online  Reporter:  Sandra  Gittlen, 
(508)  820-7431 

Staff  Writer:  Jason  Meserve,  (508)  820-7567 
Online  Copy  Editor:  Sheryl  Hodge 
(508)  820-7532 

INFRASTRUCTURE 

Senior  Editor: 

Christine  Burns,  (508)  820-7456 
Senior  Editor:  John  Cox, 

(978)  834-0554,  Fax: (978)  834-0558 
Senior  Editor:  Jeff  C  aruso, 

(650)  358-4515,  Fax  (650)  358-4518 
Senior  Editor:  D  eni  Connor, 

(512)  345-3850,  Fax: (512)  345-3860 
Senior  Editor:  Jim  Duffy,  (508)  820-7525 
Senior  Writer:  Marc  Songini,  (508)  820-7484 

CARRIERS  &  ISPs 

Senior  Editor:  David  Rohde 
(202)  879-6758;  Fax:  (202)  347-2365 
Senior  Editor:  Tim  Greene,  (508)  820-7422 
Senior  Editor:  Denise  Fappalardo 
(202)  879-6745;  Fax: (202)  347-2365 

ENTERPRISE  APPLICATIONS 

Senior  Editor:  Robin  Schreier  Hohman, 
(203)  459-9948 

Senior  Editor:  Ellen  Messmer, 

(202)  879-6752,  Fax: (202)  347-2365 
Senior  Editor:  Paul  McNamara, 

(508)  820-7471 

COPY  DESK/LAYOUT 

Managing  Editor:  Charley  Spektor 
Copy  Chief:  Melissa  Shaw 
Copy  Editors:  Lisa  Kaplan  Adase, 

John  Dooley,  Denise  Dubie, 

Melissa  Reyen 

News  Layout  Editor:  Lisa  Kaplan  Adase 

ART 

Design  Director:  Rob  Stave 
Associate  Art  Director:  Tom  Norton 
Deputy  Art  Director:  Allyson  Nickowitz 
Assistant  Art  Director:  Paul  M.  Lee 
Graphic  Designer:  Lisa  Hovsepian 
Online  Designer:  John  Fischer 
Infographics  Researcher:  Phil  Hochmuth 

FEATURES 

Features  Editor:  Paul  Desmond, 

(508)  820-7419,  Fax: (508)  820-1103 
Managing  Editor,  Features:  Amy  Schurr, 
(508)  820-7485,  Fax: (508)  820-1103 
Features  Reporter:  Neal  Weinberg, 

(508)  820-7449,  Fax: (508)  820-1103 
Associate  Features  Editor:  Susan  Collins, 
(508)  820-7413,  Fax: (508)  820-1103 
Associate  Features  Editor:  Suzanne  Caspar, 
(508)  820-7489,  Fax: (508)  820-1103 

REVIEWS 

Test  Center  Director:  Lee  Schlesinger 
(508)  820-7416 

Reviews  Editor:  Ann  Sullivan  (508)  820-7408 

Test  Alliance  Partners:  James  Gaskin,  Gaskin 
Computer  Services;  Mark  Gibbs,  Gibbs  &  Co.; 
Joel  Snyder,  Opus  One;  Dennis  Williams, 
ProductReviews.com;  John  Bass, 
Centennial  Networking  Labs;  Steve  Bell, 
Silicon  Valley  Networking  Laboratory; 

Bob  Currier,  Duke  University 
Contributing  Editors:  Daniel  Briere,  Mark  Gibbs, 
James  Kobielus,  Mark  Miller 

SIGNATURE  SERIES 

Executive  Editor:  Beth  Schultz, 

(773)  283-0213,  Fax: (773)  283-0214 
Senior  Editor:  Julie  Bort  (970)  468-2864, 
Fax: (970)  468-2348 
Art  Director:  Tom  Norton 
Deputy  Art  Director:  Allyson  Nickowitz 
Senior  Copy  Editors:  Melissa  Reyen, 
Denise  Dubie 

Editorial  Operations  Manager: 

Cheryl  Crivello 

Office  Manager.  Editorial:  Glenna  Fasold 
Editorial  Assistant:  Pat  Josefek 
Research  Assistant:  Deidre  Massenberg 


8  Network  World  March  1,  1  999  www.nwfusion.com 


Most  firewalls  are  like  bullet-proof  vests.  That's  the  proble 
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PGP  Total  Network  Security 


McAfee  Total  Virus  Defense 


Sniffer  Total  Network  Visibility 


Magic  Total  Service  Desk 


Enter  the  Gauntlet  Active  Firewall,  ever  wonder  if  your  firewall  really  works?  and  how  would  you  know  before  it’s  too  late? 

All  CDF  THOSE  NAGGING  QUESTIONS  ARE  EASILY  ANSWERED  WITH  NETWORK  ASSOCIATES’  PATENT-PENDING  GAUNTLET  ACTIVE  FIREWALL 

TECHNOLOGY.  Intrusion  Detection  &  AntiVirus  Built  In.  cybercop,  OUR  INTRUSION  DETECTION  TOOL,  TUNES  GAUNTLET  BY  SIMULATING  AN  ACTUAL 

HACKER  ATTACK  AND  CRACKING  PASSWORDS  INSIDE  YOUR  NETWORK.  TOGETHER  WITH  WEBSHIELD  (ANTIVIRUS  PROTECTION  FOR  INTERNET  GATE¬ 


The  Products  of  Choice.  Ne 


ways),  Gauntlet  Active  Firewall  provides  you  with  the  only  complete,  integrated  security  solution  available  today. 

Jetwork  Associates  is  the  choice  of  the  US  Military  and  Intelligence  Community  because  we  offer  the  only 

We  ve  Got  Your  Bock,  when  security  really  matters,  there’s  only 

one  place  to  go.  Call  us  at  BOO-332-99&6,  dept.  6242,  for  our  White  Paper  on  “The  Active  Firewall —  "t\A/  C3  I 'C. 


COMPLETE  FAMILY  OF  NETWORK  SECURITY  AND  MANAGEMENT  SOFTWARE  SUITES. 


The  End  of  the  Passive  Firewall  Era,”  or  visit  us  at  www.nai.com.  Hasta  la  vista,  hackers. 
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Who’s  watching  your  network 
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News 


MONDAY,  FEB.  22 


Dan  Rosen,  Microsoft’s  general  manager  of  new  tech¬ 
nology,  today  said  that  in  1995  he  had  a  better  perspective 
on  how  big  a  threat  Netscape  was  than  Bill  Gates  did. “Bill 
was  probably  wrong”  at  that  time,  Rosen  said  in  response  to 
Department  of  Justice  lawyer  David  Boies’  question  about  a 
Gates  memo.The  memo  called  Netscape  “a  new  competitor 
bom  on  the  Internet.” 

Rosen  said  he  spent  more  time  talking  to  Netscape,  and 
he  was  the  ranking  official  at  a  meeting  in  which  Microsoft 
allegedly  schemed  to  split  the  browser  market  with  Net¬ 
scape.  Rosen  testified  —  contrary  to  sworn  statements  by 
several  Netscape  executives  —  that  no  illegal  proposal  was 
ever  made. 

But  Rosen's  credibility  suffered  a  blow  when  Boies  caught 
him  misstating  whether  or  not  he  had  circulated  e-mail 
about  how  Microsoft  could  wrest  control  of  the  browser 
market  from  Netscape.  Rosen,  obviously  embarrassed,  had  to 
correct  his  own  sworn  testimony. 


TUESDAY,  FEB.  23 

Boies  today  continued  to  poke  holes  in  Rosen’s  credibil¬ 
ity.  Boies  asked  Rosen  when  he  first  received  a  copy  of 
Netscape’s  browser.  Rosen  said  it  was  July  1995.  Boies  pro¬ 
duced  two  e-mails  that  proved  Rosen  had  the  software  in 
April  1995.  “I  stand  corrected,”  Rosen  blurted. 

WEDNESDAY,  FEB.  24 

The  man  who  negotiates  Win¬ 
dows  deals  with  PC  makers,  Joachim 
Kempin,  took  the  stand  today. 

Boies  pounced,  pushing  the  point 
that  Compaq  got  preferential  treat¬ 
ment  from  Microsoft  because  the  PC 
giant  favored  Internet  Explorer  over 
Navigator.  No,  no,  Kempin  said. 
Compaq  competitors  who  haven’t 
pledged  their  loyalty  to  Internet 
Explorer,  like  Gateway  2000,  get  the 
same  treatment,  Kempin  said.  They 
can  all  add  Navigator  registration 
screens  before  the  Windows  welcome  screen  appears.  How¬ 
ever,  nobody  can  alter  the  Windows  boot  up  sequence  itself. 


Kempin  questioned  on 
Microsoft-PC  maker 
deals. 


THURSDAY,  FEB.  25 

Boies  and  Kempin  went  in  circles  today  about  whether 
or  not  customers  are  hurt  by  the  licensing  deals  Microsoft 
strikes  up  with  PC  makers.  Boies  argued  that  Microsoft’s 
intent  is  to  limit  end  users’  choice  of  browsers.  Kempin 
said  Microsoft  is  merely  trying  to  protect  its  intellectual 
property  in  Windows. 

FRIDAY,  FEB.  26 

Robert  Muglia,  a  Microsoft  senior  vice  president,  was  the 
last  witness  to  face  cross-examination  before  the  trial  re¬ 
cessed  for  six  weeks.  Muglia  said  that  Microsoft  has  enhanced 
Java  to  help  consumers,  an  effort  the  company  had  to  make 
because  Java  failed  to  deliver  cross-platform  performance. 

But  the  prosecution  once  again  pulled  out  internal  Micro¬ 
soft  documents,  such  as  the  one  in  which  Muglia  said  Micro¬ 
soft  should  “kill  Java  by  growing  a  polluted  Java  market.” 

—  Christine  Burns 


Windows  terminals  target  multimedia 


BY  JOHN  COX 

Hewlett-Packard  and  Wyse 
Technology  this  week  will  sep¬ 
arately  unveil  high-end  Win¬ 
dows-based  terminals  that  can 
access  video-  and  audio-heavy 
applications. 

However,  the  products  may 
prove  to  be  a  little  before  their 
time.  While  today  more  com¬ 
panies  are  using  video  applica¬ 
tions  for  corporate  training, 
most  companies  still  aren’t 
making  extensive  use  of  multi- 
media  programs. 

In  addition,  buyers  of  the 
new  devices  will  not  be  able  to 
exploit  full-motion  video  until 
later  this  year.  That’s  when 
Microsoft  and  its  partner,  Citrix 
Systems,  are  expected  to  add 
support  for  full-motion  video 
to  their  server-based  software 
products. 

Both  HP’s  and  Wyse’s  new 
terminals  use  the  200-MHz 
Cyrix  MediaGX  processor  and 
include  2M  bytes  of  video 
RAM,  double  the  amount  con¬ 
tained  in  earlier  products. 

The  key  feature  of  the  Cyrix 
processor  is  a  companion  chip 
that  shoulders  the  burden  of 
decompressing  the  video 
datastream  being  sent  to  the 
terminal. 

The  companion  chip  also 


keeps  the  audio  and  video  data 
synchronized,  as  if  you  were 
watching  a  videotape. 

As  a  result,  the  MediaGX 
chip  stays  free  to  run  several 
application  sessions  at  once  at 
full  power. 

HP’s  new  NetVectra  310 


has  a  10/ 100Base-T  network 
adapter  and  two  Universal 
Serial  Bus  (USB)  ports  HP  has 
also  added  a  package  of  15  ter¬ 
minal  emulators,  covering  a 
wide  range  of  minicomputers 
and  mainframes. 

NetVectra  310  has  16M  bytes 
of  dynamic  RAM  (DRAM)  and 
8M  bytes  of  flash  memory,  the 


same  as  in  HP’s  previous  model. 

Companies  will  be  able  to 
manage  NetVectra  from 
remote  servers  using  HP’s 
TopTools,  which  is  a  Web- 
based  tool  set.  HP  also  has 
added  an  SNMP  agent  that  will 
let  NetVectra  be  seen  and  con¬ 
trolled  by  network 
management  systems 
such  as  HP’s  Open- 
View  and  Computer 
Associates’  Unicenter. 

HP  estimates  the 
street  price  for  the 
NetVectra  will  be 
around  $700. 

The  new  Wyse  ter¬ 
minal,  dubbed  the 
Winterm  3350SE,  re¬ 
sembles  HP’s  offering. 
It,  too,  has  two  USB 
ports  and  features  15 
terminal  emulators. 

The  new  Winterm 
supports  a  resolution 
of  1280  by  1024 
pixels,  a  10/100Base-T 
interface  and  a  PC  Card 
bus.  Like  the  HP  terminal,  the 
Winterm  has  16M  bytes  of 
DRAM  and  8M  bytes  of  flash 
RAM. 

The  terminal  is  available 
now.  Wyse  estimates  the  prod¬ 
uct  will  cost  around  $750. 

HP:  (800)  752-0900;  Wyse: 
(800)  438-9973 


Hewlett-Packard's  NetVectra  is  prepared 
for  tomorrow's  video  chores. 


3Com,  IBM  debut  palmtops  for  corporate  users 


BY  JOHN  COX 

3Com  and  IBM  last  week 
introduced  palm-size  comput¬ 
ers  aimed  squarely  at  corporate 
computer  users. 

The  vendors  have  enhanced 
their  handheld  organizers  by 
adding  memory,  expansion 
slots  for  peripherals  such  as 
pagers,  an  optional  33-6K  bit/ 
sec  modem  and  connectivity 
software. 

3Com  unveiled  the  Palm  IIIx 
and  V,  both  sporting  a  new 
microprocessor,  the  latest  ver¬ 
sion  of  the  Palm  operating  sys¬ 
tem,  and  a  clearer  monochrome 
screen.  IBM  sells  the  devices  un¬ 
der  its  own  label,  called  Work- 
Pad  30x  and  c3,  respectively. 

IBM’s  WorkPads  feature  addi¬ 
tional  software.  This  includes 
EasySync  for  Lotus  Notes, 


which  connects  the  device  to 
Notes  servers,  and  WorkPad 
Infrared  Synchronization,  whid® 
lets  WorkPad  users  exchange 
data  with  one  another. 

The  Palm  IIIx  doubles  the 
memory  of  the  Palm  m  organiz¬ 
er  to  4M  bytes,  allowing  users 
to  work  on  bigger  applications 
and  store  more  data.  The  IIIx 
also  has  an  improved  LCD 
screen  that  creates  a  clearer 
monochrome  display  than  the 
Palm  Ill’s  backlit  screen. 

The  Palm  V  represents  a 
greater  break  with  the  earlier 
models.  It  weighs  just  four 
ounces  instead  of  about  six,  and 
is  less  than  1/2  inch  thick,  com¬ 
pared  with  about  one  inch  for 
the  Palm  in  models.  Instead  of 
using  two  AAA  batteries,  the 
Palm  V  uses  a  lithium  ion  bat¬ 
tery  that  recharges  when  the 


device  is  put  into  its  accompa¬ 
nying  cradle.  3Com  says  the 
charged  battery  runs  for  about 
two  weeks. 

“The  new  Palm  V  case  fits  a 
lot  nicer  in  my  palm.The  design 
is  very  thin  and  attractive,”  says 
Steven  Lui,  vice  president  of 
investment  and  systems  at 
Insurance  Corp.  of  Hannover  in 
Los  Angeles.  “The  Palm  operat¬ 
ing  system  is  extremely  effi¬ 
cient;  unlike  the  bloated  Win¬ 
dows  CE  systems  with  their 
higher-resolution  screens,  the 
Palm  can  perform  any  of  the 
prescribed  tasks  much  quicker.” 

Suggested  retail  prices  are 
$369  for  the  Palm  IIIx  and  $449 
for  the  Palm  VThe  correspond¬ 
ing  IBM  products  are  priced 
similarly. 

IBM:  (800)  426-7255;  3Com: 
(408)  326-5000 
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FLYING  COLORS 

•  Kill 


EVERY  FEW  THOUSAND  EONS, 

A  CHUNK  OF  IRON  CHANGES  EVERYTHING. 


First  comes  the  sound.  Then  the  flash.  A  few  geological  seconds  later,  there's  a  new  species  at  the 


top  of  the  food  chain.  Nice  to  meet  you.  Foundry  Networks'  award-winning  Serverlron™  server  load 
balancing  switch  does  what  no  multi-switch  scheme  can  do.  It  increases  server  performance 
with  flexible  load  balancing  of  Layer  4  traffic  at  speeds  up  to  800  Mbps. 
It  minimizes  WAN  costs  and  speeds  up  Internet  access  for  users  with 


With  transparent  cache  switching.  It  even  gives  you  hot  standby  redundant  switch  capability  to  make 


Serverlron, 

the  Fittest  sure  your  network  doesn't  die  off  when  a  server  goes  down.  Many  of  the  world's  largest  ISPs  and 

Survive. 


enterprises  rely  on  Foundry  Networks'  complete  line  of  Gigabit  Ethernet  switches,  routers  and  server 
load  balancers.  If  you're  looking  to  avoid  a  wave  of  extinctions  on  your  network,  call  1-888-TURBOLAN 
(887-2652)  and  ask  about  big  savings  on  Serverlron. 

FOUNDRY 

NETWORKS 


phone:  408.530.3300  visit:  www.foundrynet.com  email:  info@foundrynet.com 


Free  Product  info  enter  NWInfoXpress  #2  online  @  www.networkworld.com/infoxpress 


News 


ntel  gives  hope  for  distributed  policy  management 


BY  SANDRA 
GITTLEN 

HILLSBORO ,  ORE.  —  Joshua 
Norrid  has  held  off  rolling  out 
policy-based  network  manage¬ 
ment  because  he  says  the  tech¬ 
nology  is  lacking.  But  a  policy 
management  project  underway 
at  Intel  has  him  reconsidering. 

Norrid,  who  is  director  of 
application  development  at 
Bristol  Hotels  &  Resorts  in 
Dallas,  says  policy-based  net¬ 
work  management  could  be  a 
powerful  tool  for  his  company’s 
chain  of  1 20  hotels,  but  it  lacks 
useful  tie-ins  to  remote  loca¬ 
tions  and  directory  services.  Re¬ 
searchers  at  Intel  Architecture 
Labs  are  working  to  solve 
Norrid’s  dilemma  by  develop¬ 
ing  distributed  policy-based  net¬ 
work  management  technology. 

Policy  management  involves 
network  managers  defining 
rules,  or  sets  of  if-then  state¬ 
ments,  that  describe  traffic  pri¬ 
ority  and  user  access  rights.  In  a 
distributed  system,  a  central 
policy  server  would  send  rules 
across  the  net  to  departmental 
or  remote  policy  servers,  says 
John  Richardson,  director  of 
Internet  Security  and  Services 
at  Intel  Architecture  Labs. 

The  network  administrator 
configuring  the  central  policy 
server  would  retain  control 


over  general  policies,  but  lower- 
level  policy  decisions  could  be 
made  by  department  heads  or 
even  end  users. 

Currently,  policy  manage¬ 
ment  schemes  from  the  likes  of 
3Com,  Cisco  and  Nortel  Net¬ 
works  rely  on  a  central  policy 
management  server  that  sends 
instructions  to  various  network 
servers  that  simply  carry  out 
the  central  server’s  orders. 

Intel’s  distributed  policy  pro¬ 
ject  is  still  at  a  very  early  stage, 
and  few  details  are  available. 
The  company  declined  to  say 
when  distributed  policy  tech¬ 
nology  will  show  up  in  com¬ 
mercial  products.  However, 
Intel  says  the  technology  will 
build  on  proposals  for  policy 
management  before  the  Inter¬ 
net  Engineering  Task  Force 
(IETF)  and  the  Desktop  Man¬ 
agement  Task  Force.  Intel  has 
been  working  on  policy  man¬ 
agement  technology  for  about 
two  years,  and  is  teaming  with 
Hewlett-Packard  on  policy  tech¬ 
nology  for  HP’s  OpenView  net 
management  platform. 

Distributed  system  needed 

Bristol  Hotels  &  Resorts  is 
deploying  a  frame  relay  net¬ 
work  to  link  its  hotels.  “Each 
one  of  those  hotels  has  its  own 
file  server  and  network,” 
Norrid  says. “However,  they  are 


still  a  logical  extension  to  the 
home  office.” 

If  he  were  to  roll  out  policy 
management  now,  Norrid 
would  still  be  responsible  for 
every  personnel 
update  the  hotels 
made,  as  well  as  the 
employees’  access  to 
LAN  and  WAN  re¬ 
sources.  With  distrib¬ 
uted  policies,  he  could 
set  general  policies  to 
dictate  access  by  job 
title  and  then  distrib¬ 
ute  these  policies  to 
the  hotels.  Managers 
could  use  the  informa¬ 
tion  to  give  new  em¬ 
ployees  appropriate 
access  rights. 

Norrid  says  tying 
in  directory  services 
would  be  key  because 
he  could  give  users  a 
single  password  to 
access  all  applications. 

“The  time  and  cost 
savings  could  be  enor¬ 
mous,”  Norrid  says. 

“Right  now,  every 
application  I  roll  out, 

I  have  to  tie  into  an  ex¬ 
isting  security  model 
or  create  a  new  one.  A 
user  might  have  six  passwords.” 

In  fact,  Intel’s  distributed  pol¬ 
icy  research  involves  the  use  of 
the  Lightweight  Directory  Ac¬ 


cess  Protocol  to  tie  users’  pro¬ 
files  to  their  net  access  rights. 

The  IETF  is  set  to  meet  later 
this  month  on  the  proposals  for 
centralized  policy-based  net¬ 


work  management.  Intel,  which 
co-authored  some  of  the  pro¬ 
posals,  has  no  time  frame  for 
pitching  its  distributed  policy 
approach.  B 


Distributed  policy  plans 


Bristol  Hotels  &  Resorts  says  it  could  use  distributed  policies  to  ease  its 
network  administration  burden  between  the  home  office  and  the  company's 
120  hotels. 


o  A  network  manager  distributes  general 
policies  outlining  network  access  and 
traffic  priority  to  each  hotel  policy  server. 


Hotel 

policy 

server 


o  Using  a  new  employee's  job  title, 
the  hotel  manager  is  able  to 
quickly  assign  the  employee 
network  rights  based  on  the 
policies  downloaded  from  Dallas. 


Dallas 
headquarters 

©  The  new  employee  now  has 
access  to  the  home  office 
based  on  the  general  policy. 
The  hotel  manager  can  also 
authorize  LAN  privileges  based 
on  his  own  local  policy. 


Hotel 

policy 

server 


New  employee's 
PC 


Pricey  Java  tools  guide  shoppers 
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MyEurekal:  A  portal  in  every  port 

By  now  everyone  in  this  business  has  heard  of 
portals:  Yahoo!,  Netcenter,  the  list  goes  on,  and  on, 
and  on. 

Information  Advantage  believes  there  are  not 
enough  portals.  In  fact,  the  company  thinks  every 
company  (and  even  every  employee)  should  have 
its  very  own  portal. 

That's  where  MyEurekal,  a  so-called  business 
intelligence  portal  for  the  enterprise,  enters  the 
equation.  The  MyEurekal  system  can  cull  information 
from  a  variety  of  data  sources,  including  databases 
and  enterprise  resource  planning  (ERP)  and  reporting 
systems,  and  then  present  links  and  summaries  of 

the  data  on  a  personalized  Web  page.  Users  can  subscribe  to  specific  reports  and  set  up  agents  that  alert  them  if  certain 
reports  or  charts  have  been  recently  updated.  This  way,  only  items  of  importance  appear  on  the  portal  page. 

At  the  system's  core  is  the  MyEurekal  Content  Server,  a  repository  for  all  the  company's  business  intelligence  information. 
The  Content  Server  can  link  to  many  of  the  leading  business  intelligence  tools  and  ERP  systems,  as  well  as  other  third-party 
data  systems. 

Written  in  Java,  MyEurekal  can  be  deployed  on  any  server  with  a  Java  Virtual  Machine.  Prices  range  from  $100  to  $1,000 
per  user  and  are  based  on  the  combination  of  portal  and  business  intelligence  components  being  deployed. 

Information  Advantage:  (612)  833-3700 
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BY  ELLEN  MESSMER 

SAN  JOSE  —  Selectica  has 
just  shipped  the  ACE  3-0 
Product  Suite,  a  set  of  Java-based 
software  modules  that  helps 
online  shoppers  find  merchan¬ 
dise  according  to  specific  quali¬ 
ties,  such  as  price  or  color. 

Acting  like  a  virtual  sales 
assistant,  the  ACE  Advisor  soft¬ 
ware  module  takes  the  buyer’s 
wish  list,  which  can  be  com¬ 
posed  within  any  Web  brows¬ 
er,  and  checks  back-end  data¬ 
bases  to  find  products  meeting 
the  customer’s  interests.  Once 
ACE  has  found  the  right  stuff,  it 
sends  product  information  and 
images  to  the  Web  storefront. 

The  ACE  suite  contains 
another  new  module,  ACE 
Pricer,  which  keeps  a  running 
tally  of  product  costs. 

ACE  3.0  has  been  getting  a 
test  drive  on  the  BMW  AG  Web 
site,  where  people  can  check 
out  the  latest  features  and 


prices  of  automobiles.  Ralf 
Maltzen,  BMW’s  marketing 
manager  for  Internet  applica¬ 
tions,  says  ACE  3  0  helps  pro¬ 
vide  a  “highly  personalized 
consumer  experience.” 

Like  BMWs,  ACE  3  0  isn’t 
cheap. The  ACE  Enterprise  serv¬ 
er,  which  comes  bundled  with 
the  ACE  Configuration  Engine, 
ACE  Pricer  and  ACE  Advisor 
modules,  costs  $150,000. 

ACE  Quoter,  a  new  module 
for  storing  the  customer’s 
product  selections  and  pricing 
in  a  central  database  with  links 
to  electronic  commerce  com¬ 
ponents,  costs  $150,000  per 
module. 

The  ACE  Connector  for 
Oracle,  a  direct  link  from  ACE 
into  Oracle  databases  and 
applications,  costs  $150,000 
per  deployment.  The  set  of 
modeling  tools  for  the  ACE 
line,  called  ACE  Studio,  costs 
$25,000  per  seat. 

Selectica:  (408)  570-9703 
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It's  not  something  you  have  to  rip  out  and  replace  after  a  few  years. 
It  won't  cost  you  a  fortune  every  year  in  technological  bandages. 


It  doesn't  take  people's  time  and  attention  away  from  your  core  business. 

It  doesn't  limit  what  you  can  do  while  you're  waiting  for  technology's  next  big  thing. 

At  FORE  Systems,  we  build  communications  infrastructures  that  really  are  infrastructures. 
Networks  that  take  whatever  your  company  throws  at  them,  without  going  down. 
Networks  you  can  take  for  granted.  Networks  that  last. 

Of  course,  we're  from  Pittsburgh. That's  what  'infrastructure'  has  always  meant  around  here. 


FORE 

SYSTEMS 


www.fore.com 


1.800.320.9745 


Networks  of  Steel. 


Free  Product  info  enter  NWInfoXpress  #1  online  @  www.networkworld.com/infoxpress 
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Intelligent  T1  DSU/CSU 
with  TDM  voice 

Intelligent  monitoring 
device  for  international  circuits 
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ADTRAN  Frame  Relay  IQ.  A  complete  solution  for 
monitoring  and  optimizing  Frame  Relay  performance 

You  no  longer  have  to  sacrifice  control  to  enjoy  the  cost-savings 


everything  you  need  to  stay  on  top  of  Frame  Relay  network 
performance  at  all  times.  These  intelligent,  frame-aware  devices 
gather  thorough  Layer  1,  2,  and  3  statistics.  This  data  is  accessible 

using  any  SNMP-based  management 
system  (including  our  own  IQ  View®) 
Ml  WBBBMWMI  Suddenly,  it’s  easy  to  identify 

problem  areas,  anticipate 
future  demands,  or  simply  peer 
ttttltltiiiltftttttttllM  into  the  remote  end.  ADTRAN’s 

Frame  Relay  IQ  is  quick,  easy, 
and  affordable.  And  it’s  the  only 
solution  of  its  kind  that  offers  a 
reassuring  disaster  recovery  option 


Integrated 
ccess  system 
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IQView  Protocol  Distribution  screen 


Proactively  manage  your  Ira  me 
Relay  network  with  ADTRAN’s 
affordable,  Windows^- based 
network  management  program. 


For  a  free  brochure,  call  today 

8??  280-8416  (toll-free) 

www.adtran.com/iqframe 
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OSU  tQ,TSU  IQ.  TSU  IQ+,  and  IQ  Probe  aretta'demarks  of  ADTRAN,  Inc.  ADTRAN  is  a  registered  trademark  of  ADTRAN.  Inc, 

IQ  View  is  a  registered  trademark.  All  other  tra^inarlisxir  (ogtstered  trademarks  are  the  properly  of  their  respective  owners. 
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Experts  choose  ADTRAN 


Infrastructure 

H  TCP/IP,  LAIU/WArU  Switches ,  Routers,  Hubs, 

Access  Devices,  Clients,  Servers,  Operating  Systems,  VPIMs 


Uriels 


Start-up  Clarinet  Systems,  Inc. 
this  month  will  unveil  an  infrared 
wireless  LAN  that  provides  4M 
bit/sec  to  the  desktop.  Portable 
PCs  can  use  their  infrared  ports 
to  communicate  with  the  EthIR 
LAN  access-point  box.  No  net¬ 
work  card  is  necessary.  An  eight- 
port  system  costs  $1,700,  and  a 
16-port  system  costs  $3,200. 

Clarinet:  (408)501-0250 


Madge  Networks  has  begun 
shipping  a  switch  designed  to 
bring  ISDN  videoconferencing 
capabilities  to  small  and  branch 
offices.  The  Madge  Intelligent 
Switch  can  tie  desktop  videocon¬ 
ferencing  gear  into  a  WAN  for 
site-to-site  videoconferencing.  It 
can  also  switch  video  traffic 
locally.  The  box  has  eight  Basic 
Rate  Interface  ISDN  ports  and 
three  T-1  ports.  It  costs  $8,000. 

Madge:  (408)  955-0700 


Cftrix  Systems  has  released 
the  latest  version  of  its  Meta- 
Frame  software  for  multiuser  NT 
servers.  Among  the  new  fea¬ 
tures  in  MetaFrame  1.8  are  the 
administration  of  groups  of 
servers 
across  sub¬ 
net  bound¬ 
aries;  the 
automatic 
connection  of 
users  to  a 
backup  serv¬ 
er  group  if 
the  primary 
group  fails; 
and  support 
for  client 

computers  running  Linux  and 
Santa  Cruz  Operation  Unix  oper¬ 
ating  systems. 

MetaFrame  1.8  costs  $5,995 
and  includes  a  license  for  15 
concurrent  users  and  a  one-year 
subscription  for  all  MetaFrame 
enhancements,  updates  and 
maintenance  releases. 

Citrix:  (954)  267-3000 


MetaFrame  1.8 
can  connect 
users  to  a  back¬ 
up  server  group. 


IN'SITE:  Lessons  from  Leading  Users 


Massachusetts  college  takes  a  class  in  VPNs 

BY  TIM  GREENE 


itchburg  State  College  is  betting 
that  its  new  virtual  private  net- 
— ■  work  (VPN)  will  be  able  to  handle 
|  an  expected  flood  of  remote  users 
as  the  school  opens  its  network 
resources  to  satellite  campuses, 
telecommuters  and  local  public 
schools. 

Potentially,  thousands  of  remote 
users  will  have  to  be  authenticated  and 
granted  restricted  rights  to  the  campus 
network,  says  Joe  Turner,  associate 
director  of  MIS.  And  the  Massachusetts 
college  really  isn’t  sure  what  network 
resources  will  be  most  in  demand,  he 
says. 

“Do  we  have  a  driving  application 
right  now?  No.  How  will  we  actually 
use  the  VPN?  I  don’t  know,”  says  Turner, 
who  designed  the  VPN  with  extreme 
flexibility  in  mind. 

The  VPN  has  been  set  up  because: 

•  The  college  is  negotiating  with  the 
City  of  Fitchburg  to  set  up  homework- 
zone.com,  a  place  where  middle  school 
kids  can  post  academic  questions  to 
professors. 

•  The  faculty  is  clamoring  to  work 
more  at  home.  “They  say,  We  need  to 


do  more  than  just  pick  up  our  e-mail,’  ” 
Turner  says. 

•  Fitchburg  State  is  offering  courses 

Fitchburg  State  s  VPN  course 


and  degrees  to  students  in  Bermuda, 
which  has  no  four-year  college. 

See  IN-SITE,  page  18 


This  Massachusetts  state  college  has  set  up  a  VPN  to  accommodate  an  anticipated 
increase  in  remote  access  users. 


O  Remote  users  dial  in  to  the 
college's  VPN  via  a  local  ISP. 


1 

3Com 

ATM 

switches 


©  Rather  than  going  through  an 
existing  firewall,  calls  are 
handled  by  an  Altiga  Cl  0  VPN 
concentrator.  The  Altiga  box 
checks  user  passwords  and 
names  against  those 
contained  in  a  RADIUS  server. 


Altiga  VPN 
concentrator 
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©  Users  then  gain  access  to 
appropriate  virtual  LANs,  which 
are  managed  by  two  3Com 
Cellplex  7000  ATM  switches. 


RADIUS  server 


Procom  gives  users  more  network  storage  space 


NetForce  high-end  data  servers  designed  for  data  warehouse  applications. 

BY  DENI  CONNOR 


Procom  Technology  last  week 
introduced  a  pair  of  aggressively 
priced  servers  aimed  at  data 
warehouse  environments  requir¬ 
ing  lots  of  storage  capacity  and  high 
availability. 

The  NetForce  2000  and  2200  net¬ 
work-attached  storage  systems,  which 
Procom  previewed  at  the  FOSE  ’99  gov¬ 
ernment  IT  show  in  Washington,  D  C., 
are  Procom ’s  first  high-end  data  servers. 

The  new  products  put  Procom  into 
competition  with  the  likes  of  Network 
Appliance  andAuspex  in  this  segment  of 
the  storage  market,  according  to  Farid 
Neema,  president  of  Peripheral  Con¬ 
cepts,  a  market  research  and  consulting 
firm  in  Santa  Barbara,  Calif. 


The  10-bay  NetForce  2000  stores  up  to 
180G  bytes  of  data;  the  2200  has  a  larger 
disk  and  supports  up  to  900G  bytes.  Both 
models  can  be  attached  to  Windows  NT 
or  Unix  networks  and  allow  users  to 
share  data  across  both  network  types.The 
devices  attach  to  networks  via  10/ 
100Base-T  or  Fibre  Channel  interfaces. 

The  servers  support  RAID  levels  0,  1, 
3,  5  and  10.  The  2200  is  available  in  an 
active-active  RAID  architecture,  in  which 
RAID  controllers  back  each  other  up  in 
the  event  of  a  failure.  Pricing  for  the  new 
NetForce  systems  starts  at  $35,000. 

Neema  says  the  new  NetForce  models 
are  attractively  priced  given  their  avail¬ 
ability  features.  He  points  to  the  servers’ 
online  expansion  capabilities,  which 
enable  users  to  add  drive  capacity  with¬ 
out  taking  the  systems  offline. 


In  April,  Procom  will  unveil  the  2500 
and  2600  data  servers,  which  will  pro¬ 
vide  even  more  capacity.  They  will  han¬ 
dle  from  900G  bytes  to  1.8  terabytes  of 
data.  Pricing  for  these  models  will  start 
at  $100,000. 

Procom  has  also  upgraded  its  product 
line  by  introducing  a  rack-mountable  ver¬ 
sion  of  its  entry-level  NetForce  1 OOR  data 
server  for  NT  networks.The  server  boasts 
24G  to  80G  bytes  of  net  disk  capacity.The 
100R  features  a  10/ 100Base-T  interface, 
and  pricing  starts  at  $5,700. 

Procom  also  announced  the  Data- 
Force  250  and  275,  the  latest  versions  of 
its  CD-ROM  workgroup  servers.  The 
servers,  which  attach  to  networks  via 
10/ 100Base-T,  hold  250  and  275  CDs, 
respectively.  Pricing  starts  at  $8,592. 

Procom:  (949)  852-1000 
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3Com  bolsters  VPN.  telephony  support 


BY  JIM  DUFFY 

SANTA  CLARA,  CALIF.  —  3Com  is 
bulking  up  its  virtual  private  network 
(VPN)  and  telephony  capabilities  via 
separate  product  development  and 
acquisition  initiatives. 

3Com  this  week  is  expected  to 
announce  a  partnership  with  Advanced 
RISC  Machines  (ARM)  to  add  more  pro¬ 
cessing  punch  to  3Com  network  inter¬ 
face  cards  (NIC). 

Specifically,  ARM’s  32-bit  Reduced 
Instruction  Set  Computing  technology 
will  enable  3Com  NICs  to  segment 
TCP  packets  so  it’s  easier  to  add  tun¬ 
neling,  encryption  and  other  security 
features  to  the  data  for  transport  over  a 
VPN. 

For  LAN  telephony,  3Com  last  week 
announced  a  definitive  agreement  to 
acquire  NBX,  an  Andover,  Mass.,  devel¬ 
oper  of  telephony  systems  that  inte¬ 
grate  voice  and  data  over  small  busi¬ 
ness  LANs  and  WANs.The  transaction  is 
worth  about  $90  million. 

Under  the  ARM  arrangement,  3Com 
will  develop  NICs  that  will  be  able  to 
offload  TCP  processing  from  host  com¬ 
puters.  The  ARM  chip  on  the  NICs  will 
segment  the  packets,  while  another 
on-board  chip  from  VLSI  Technology 
will  add  IP  Security  encryption  to  the 
packets. 

The  ARM  and  VLSI  chips  will  allow 
host  computers  to  dedicate  more  CPU 
power  to  application  processing. 

ARM  has  a  similar  arrangement  with 
3Com  rival  Intel.  One  reason  3Com 
partnered  with  ARM  was  to  add  intelli¬ 
gence  to  3Com  NICs  in  order  to  make 
them  more  attractive  than  Intel  NIC 
technology  embedded  into  PC  mother¬ 
boards,  says  Esmeralda  Silva,  LAN  ana¬ 
lyst  at  International  Data  Corp.  in  Fram¬ 
ingham,  Mass. 

NBX  buyout 

The  NBX  acquisition  is  a  way  for 
3Com  to  respond  to  Cisco,  which 
acquired  LAN  PBX  vendor  Selsius 
Systems  last  year. 

According  to  3Com’s  estimates,  the 
worldwide  market  for  LAN  telephony 
will  be  approximately  $5  billion  by 
2003,  with  more  than  two-thirds  of  the 
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•  See  what  makes  the  ARM 
chip  run. 

•  A  detailed  look  at  the 
convergence  of  voice  and 
data  on  a  single  network. 
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sales  going  to  small  and  mid-size  enter- 
prises.The  appeal  to  small  and  mid-size 
businesses  is  the  apparent  cost  savings 


they  can  realize  by  combining  voice 
and  data  onto  one  network. 

The  transaction  is  expected  to  be 


completed  in  March. 

Over  the  past  few  months,  3Com  has 
made  a  handful  of  strategic  telephony 
announcements,  including  a  joint  ven¬ 
ture  with  Siemens  to  develop  LAN  tele¬ 
phony  and  multimedia  products  for 
mid-size  and  large  enterprises.  B 


When  the  power 


Introducing  our  newest 
solutions  for  end-to-end 
network  availability 

Storms,  blown  fuses,  backhoes... 
the  causes  of  power  problems 
are  numerous,  and  the  results 
painful:  data  loss  and  damage 
to  your  expensive  hardware. 
When  power  fails,  APC  prevails 
with  award-winning  surge 
suppressors,  battery  backup, 
security  enclosures  and 
management  software  to 
deliver  end-to-end  reliability, 
guaranteed.  So  ask  your 
favorite  reseller  about  APC 
peace  of  mind  or  visit  our 
Web  site  today  for  an  APC 
solution  for  you! 


Notebook 

computers 


solutions 
starting  at  $19.95 

■  Complete  AC,  telephone/modem 
surge  protection  for  notebooks 

■  Multi-voltage  design  for  use  worldwide 

■  Lifetime  product  warranty 


Find  out  why  APC  has  won  over 
130  awards  for  reliability  and  visit 
wvwv.apcc.com  today. 


r 
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Desktop  PCs 


Servers 


solutions 
starting  at  $99 

■  Surge  protection  and  battery 
backup  for  your  computer  and 
internet  connection 

■  Data-saving  software  provides 
warnings  and  safe  shutdown 

■  User-replaceable  batteries  provide 
3-6  years  of  reliable  service 

■  "Best  in  Class"  longest  runtime 
guarantee  (5-40  minutes) 

■  Complete  lightning  and  surge  protec¬ 
tion  backed  by  a  $25,000  guarantee 


"The  best  equipment  doesn't  fail: 
we  use  APC's  Back-UPS  Prrf. " 

Brian  Walsh,  Manager, 

In-store  Systems,  Help  Desk, 

A&P  Grocers 


solutions 
starting  at  $325 


i  Intelligent  Battery  Management  with 
FastCharge™  cuts  recharge  time  by  75% 

i  PowerChute®  plus  software  provides 
warnings,  environmental  monitoring 
and  safe  shutdown  (features  vary  by 
UPS  and  OS) 

i  SNMP  compatible  and  manageable  by 
your  Web  browser 

i  FlexEvents  ”  E-mails  or  pages  you 
before  your  users  know  of  problems 


“Because  power  failure  is  not 
acceptable,  APC  Smart-UPS* 
are  our  standard. " 

Paul  Thacker,  Staff  Engineer 
Honda  of  America, 

Information  Services  Group 
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FREE 


68-page  Guide 
to  Power  Protection 


Learn  how  to  protect  any  size  system 


with  APC  legendary  reliability. 


Just  mail  or  fax  this  completed  coupon  for  your 
FREE  68-page  Guide  to  Power  Protection.  Better 
yet,  order  it  today  at  the  APC  Web  site! 

KEY  CODE 

http://promo.apcc.com  i352z 

(888)  289-APCC  x7495  •  FAX:  (401)  788-2797 


□  YES!  Please  send  me  my  FREE  68-page  Guide  to  Power  Protection. 

Name:  _ 

Title:  _ Company:. 

Address:  _ 

City/Town:  _ State:  

Phone: _ 

Brand  of  UPS  used?  _ 

Brand  of  PC  used? _ 

Brand  of  Servers  used? _ 


CH  NO,  I'm  not  interested  at  this  time  but  add  me 
to  your  mailing  list. 


Zip: 


Country. 


.# 

.# 
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Call:  <888)  289-APCC 
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Fax:(401)  788-2797 
Visit  http://promo.apcc.com 

use  the  key  code  on  the  reverse  side 
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Wired  Windows  .  Dave  Kearns 

The  help  we  really  need 


The  Microsoft  antitrust  case  is  still 
far  front  over,  but  most  pundits 
have  decided  that  Microsoft  will  lose. 
Having  finished  playing  “You  be  the 


Judge,”  the  commentators  are  now  play¬ 
ing  “What's  the  Penalty?”  Suggestions 
range  from  huge  fines  to  a  breakup  of 
the  Redmond  behemoth. 


Instead  of  speculating  about  legal 
issues,  let’s  talk  about  government  super¬ 
vision  of  the  computer  industry.  What 
could  something  like  a  Federal  Comput¬ 
er  Commission  do  to  help  consumers? 

It  could  create  a  standard  warranty  for 
software  and  hardware  overriding  the 
ridiculous  nonwarranty  now  used  in 


Networking 


solutions 
starting  at  $399 


Datacenters 


solutions 
starting  at  $3,599 


Enterprise 


solutions 
starting  at  $14,803 


■  Complete  UPS  protection  for  hubs, 
switches  and  routers 

■  Managed  enclosures  for  every  server 
platform  and  internetworking  equipment 

■  Remote  power  management  reboot 
and  diagnosis 

■  User  paging  when  network  power 
anomalies  occur 

■  User-replaceable  and  hot-swappable 
batteries 

■  Data,  network  and  serial  line  protection 

■  "APC  NetShetters*... offered 
many  advantages  over 
conventional  racks,  such  as 
great  ventilation,  mobility,  and 
security  management " 

Joe  Trains,  Sales  Representative, 
AlphaNet  Solutions,  Inc. 


■  Power  Array  "  technology  promises 
complete  peace  of  mind  for  any 
size  datacenter 

■  Scalability  allows  modular  expansion 
and  reconfiguration  as  your  datacenter 
grows 

■  Symmetra"  reduces  risk  of  system 
downtime  with  N+1  redundancy 

■  Complete  solution  integrates  into 
all  popular  enterprise  management 
solutions 

"APC  has  innovative  technolo¬ 
gy  which  promises  reliability, 
Symmetra™  interacts 
smoothly  with  both  hardware 
and  software. " 

Ron  O'Reilly,  Field  Support 
Formerly  Manager/IS, 

Toyota  Motor  Sales,  USA 


■  For  site-wide  protection  from  lOkVA 
to  infinity 

■  Innovative  Delta  conversion  "  design 
means  unmatched  efficiency  and  low 
operating  costs 

■  Small  footprint  saves  facility  space 

■  PowerAudif"  physical  consulting 
identifies  problems  before  they  occur 


FREE  68-page  "how  to" 


\  Y  http://promo.apcc.com 


(888)  289-APCC  x  7495  KEY  CODE  j  3  5  2  Z 
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Free  Product  info  enter  NWInfoXpress  #9  online  @  www.networkworld.com/infoxpress 


most  software  licenses  (“Microsoft 
expressly  disclaims  any  warranty7  for  the 
software  product.  The  software  product 
and  any  related  documentation  is  pro¬ 
vided  ‘as  is’  without  warranty7  of  any 
kind,  either  express  or  implied,  includ¬ 
ing,  without  limitation,  the  implied  war¬ 
ranties  or  merchantability,  fitness  for  a 
particular  purpose,  or  noninfringement. 
The  entire  risk  arising  out  of  use  or 
performance  of  the  software  product 
remains  with  you.”).The  warranty  could 
specify  that,  at  a  minimum,  the  product 
should  perform  as  advertised  and  as  out¬ 
lined  in  its  manual  and  help  files. 

The  commission  could  also  set  a  stan¬ 
dard  for  consequential  damages.  For 
example,  if  your  software  crashes  my 
server,  then  you,  the  software  vendor, 
are  liable.  Maybe  we  could  have  an  inde¬ 
pendent  panel  oversee  computer  certifi¬ 
cation  programs.  Requirements  would 
include  a  demonstrated  proficiency  with 
the  product  on  which  the  user  is  being 
certified,  not  just  the  ability  to  give  rote 
answers  to  questions. 

But  the  one  thing  I’d  really  like  to  see 
is  an  official  crash  test  for  hardware  and 
software  products,  similar  to  that  used 
for  cars. The  results  would  be  published 
so  everyone  could  see  which  vendors 
provided  the  most  reliable  products. 
Seeing  where  Microsoft  products  rank 
on  the  list  could  go  a  long  way  toward 
reducing  the  company’s  monopoly  of 
desktop  operating  systems. 

Or  perhaps  Bill  Gates  will  go  on  tele¬ 
vision,  apologize  for  his  inappropriate 
activities,  then  claim  it  was  all  about  sex, 
and  it’s  a  private  issue  between  Melinda 
and  himself. The  American  public  would 
claim  to  be  satisfied,  and  the  whole 
tiling  would  just  go  away  as  we  got  on 
with  the  business  of  America.  And 
“reset”  would  still  be  the  button  you 
were  most  familiar  with  on  the  front  of 
your  crash-prone  Windows  computer. 


Kearns ,  a  former  network  adminis¬ 
trator,  is  a  freelance  writer  and  con¬ 
sultant  in  Austin,  Texas.  He  can  be 
reached  at  wired@vquill.com. 


Tip 


of  The 
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Novell  has  closed  one  of 
the  few  gaps  in  Novell 
Directory  Services  (NDS) 
by  reaching  an  agreement  with 
ActivCard  to  support  ActivCard's  Smart 
Card  technology.  This  directory-enabled 
product  uses  NDS  to  manage  user 
access  to  network-based  information  and 
resources  via  ActivCard's  integrated  Cor¬ 
porate  Wallet  services,  including  conve¬ 
nient  smart  cards  or  token  devices  used  to 
establish  the  identity  of  users.  See  www. 
acticard.com/products/BMAS-ActivCard/ 
index.html  for  further  information. 
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server  vendors  start  taking  on  downtime 


Companies  are  guaranteeing  that  clusters  of  their  machines  won’t  fail  —  for  a  price. 


BY  DENI  CONNOR 

Recognizing  that  more 
companies  are  relying  heavily 
on  their  Windows  NT  server 
applications,  server  vendors 
have  begun  guaranteeing  that 
the  machines  running  those 
applications  won’t  fail.  While 
such  pledges  are  commend¬ 
able,  they’re  not  yet  all  they’re 
cracked  up  to  be. 

The  guarantees,  which 
apply  to  NT  server  clusters, 
are  similar  to  those  offered  by 
Unix  server  vendors.  But  the 
catch  is  that  NT  servers  aren’t 
quite  as  reliable  as  Unix 
machines  —  whereas  Unix 
vendors  guarantee  99. 99% 
uptime,  NT  vendors’  offers 
typically  range  from  99  5%  to 
99.9%,  which  translates  into 
anywhere  from  nine  hours  to 
several  days  of  downtime  per 
year.  What’s  more,  an  NT  serv¬ 
er  uptime  guarantee  can  cost 
a  company  more  than  the 
servers  themselves,  and  most 
guarantees  only  apply  to 
the  vendors’  top-of-the-line 
machines. 

IBM  is  the  latest  vendor  to 
join  Compaq,  Data  General 
and  Hewlett-Packard  in  sign¬ 
ing  up  customers  for  uptime 
guarantee  service  contracts. 
Unisys  will  unveil  a  high-avail¬ 
ability  guarantee  later  this 
month  for  its  Aquanta  ES 
servers.  Dell,  which  relies 
heavily  on  third-party  sup¬ 
port,  has  not  announced  any 
such  plans. 

Analysts  commend  the  ven¬ 
dors  for  trying  to  put  their 
money  where  their  mouths 
are,  but  say  they  do  face  a 
challenge. 

Currently,  just  2%  of  NT 
server  customers  buy  any  sort 
of  service  agreement,  accord¬ 
ing  to  International  Data 
Corp.,  a  Framingham,  Mass., 
market  research  firm. 

NT  has  robustness  and  avail¬ 
ability  issues  that  make  guaran¬ 
teeing  uptime  a  risky  proposi¬ 
tion  for  server  vendors,  but 
demand  for  such  guarantees 
should  be  on  the  rise,  accord¬ 
ing  to  James  Gruener,  NT 
Server  analyst  for  Aberdeen 
Group  in  Boston.  “As  more 
Windows  NT  applications 
become  mission-critical,  such 
as  messaging,  e-commerce  and 


databases,  the  need  for  them  to 
be  highly  available  has  steadily 
increased,”  Gruener  says. 

A  large  retailer  in  the  south¬ 
ern  U.S.  loses  $65,000  per 
hour  when  its  e-commerce 
site  is  down,  according  to  a 
company  spokesman,  who 
asked  that  neither  he  nor  his 


Up  and  running 


company  be  named.  So  even  if 
his  company  signed  up  for  a 
server  vendor’s  99. 9%  uptime 
guarantee  and  the  vendor 
lived  up  to  it,  the  retailer 
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continued  from  page  1 5 

Currently,  the  VPN  is  being 
used  only  by  a  dozen  staff 
members,  while  other  remote 
users  go  through  an  existing 
firewall. 

The  VPN  users  call  their  ISPs 
locally  and  use  the  Internet  to 
hit  an  Altiga  Networks  CIO 
VPN  concentrator  that  sits  at 
the  Internet  threshold  to  the 
college  network. 

The  concentrator  chal¬ 
lenges  users  for  name  and 
password,  authenticates  them 
and  then  grants  access. 
Remote  users  have  VPN  rights 
restricted  according  to  which 
ATM  virtual  LAN  they’ve  been 
assigned. 

The  VLANs  are  managed  by 
two  3Com  Cellplex  7000  ATM 
switches  that  anchor  the  cam¬ 
pus  backbone. 

As  more  users  from  outside 
the  college  community  seek 
access,  they  may  be  segregated 
by  new  VLANs, Turner  says.  He 
will  also  go  to  a  separate 
Remote  Authentication  Dial-In 
User  Service  server  to  handle 


could  stand  to  lose  more  than 
$500,000  because  of  server 
downtime. 

The  retailer  is  using  cluster¬ 
ing  technology  called  Endur¬ 
ance  4000  from  Marathon 
Technologies,  which  takes  off- 
the-shelf  servers  and  links 
them  via  proprietary  software 


and  hardware  into  four-way 
reliable,  fault-tolerant  clusters. 
Marathon  offers  99.995% 
availability  or  less  than  30 
minutes  of  downtime  per 


authentication. 

For  example,  a  server  to 
handle  homeworkzone.com 
traffic  might  be  assigned  a 
VLAN  of  its  own.  User  rights 
could  also  be  set  by  class.  So 
blocks  of  IP  addresses  could 
be  assigned  to  each  class,  and 
IP  filters  could  be  configured 
to  keep  users  out  of  LAN  seg¬ 
ments  to  which  they  are  not 
authorized  access. 

Distributing  VPN  client 
software  to  remote  users 
shouldn’t  be  a  problem, Turner 
says.  Users  whose  machines 
are  outfitted  with  Windows  95 
or  NT  with  Dialup  Networking 
1.3  will  be  able  to  establish  an 
encrypted  session  over  the 
Internet  to  the  Altiga  box  via 
the  Point-to-Point  Tunneling 
Protocol. 

For  more  sensitive  traffic 
that  needs  stronger  encryp¬ 
tion,  users  will  be  able  to 
download  an  Altiga  client  that 
supports  the  IP  Security  proto¬ 
col  with  Data  Encryption 
Standard  (DES)  and  DES3 
encryption. 

Turner  says  the  Altiga  box 
handles  up  to  5,000  simultane- 


year.  The  retailer’s  system  has 
been  running  without  any 
downtime  for  more  than  a 
year,  the  spokesman  says. 

Uptime  ain't  cheap 

Companies  that  sign  on 
with  server  vendors  for 
uptime  guarantees  may  suffer 


a  bit  of  sticker  shock.  Pricing 
for  some,  such  as  Compaq’s 
99. 9%  High  Availability 
Services  for  Windows  NT  pro¬ 
gram,  starts  at  $20,000  per 


ous  sessions,  and  Altiga  boxes 
can  be  stacked  if  traffic  grows 
beyond  that  limit. 

Turner  says  it  took  about  an 
hour  to  install  the  Altiga  box. 
“It’s  similar  to  configuring  a  PC 
on  a  local  network,”  he  says. 
List  price  for  the  concentrator 
is  $10,000. 

Until  the  VPN  was  set  up 
late  last  year,  the  school’s 
remote  access  system  con- 


year  —  not  much  less  than  the 
cost  of  the  two-server  clusters 
they  protect.  And  users  of 
these  clusters  must  often  qual¬ 
ify  for  the  program  and  add 
extra  services  to  the  package, 
which  can  bring  the  cost  of 
the  service  contract  to  more 
than  $300,000. 

Under  Compaq’s  offer,  the 
vendor  monitors  its  custom¬ 
ers’  server  clusters  remotely. 
When  trouble  occurs,  the  user 
has  a  dedicated  technical 
account  manager  he  or  she 
can  contact. 

In  the  event  of  server 
downtime,  vendors  typically 
do  not  insure  against  lost  data 
or  employee  time.  Rather,  they 
offer  credits  that  can  be  used 
to  reduce  service  costs. 

“The  customer  needs  to 
calculate  the  type  of  outages 
it  can  stand,  and  how  much 
money  it  loses  if  its  servers 
are  not  running.  If  the  cost  of 
the  agreement  itself  is  less 
than  the  downtime  cost  asso¬ 
ciated  with  it,  then  [down¬ 
time  agreements]  are  worth 
it,”  Gruener  says.  \jk 


sisted  of  32  modems  used 
mainly  for  accessing  e-mail 
and  supporting  terminal  emu¬ 
lation. 

Turner  says  the  VPN  is 
already  being  eyed  to  support 
a  wider  variety  of  applica¬ 
tions,  including  filing  elec¬ 
tronic  admissions  applica¬ 
tions,  remote  registration  for 
classes  and  printing  unofficial 
transcripts. 

With  enhanced  se¬ 
curity  such  as  smart 
cards, Turner  envisions 
the  outside  firm  han¬ 
dling  the  school’s  pay¬ 
roll  to  access  the  ad¬ 
ministration  database. 

And  Turner  says  he 
is  already  thinking 
about  getting  a  second 
T-l  access  link  to  the 
Internet  from  a  differ¬ 
ent  service  provider. 
That  would  not  only 
improve  response 
times  during  peak 
loading,  but  it  also 
would  offer  a  diverse¬ 
ly  routed  fallback  if 
one  of  the  links  goes 
down. 


Fitchburg  State's  Turner  says  installing 
Altiga's  VPN  box  was  a  snap. 


Here  is  a  sampling  of  uptime  guarantees  offered  by  server  vendors  for  Windows  NT  server  clusters. 
The  guarantees  apply  only  to  certain  machines,  and  in  some  cases,  applications. 


Vendor 

Program 

Servers  covered 

Compaq 

High  Availability  Services  for  Windows  NT 

ProLiant  3000s  and  6500s 

Data  General 

OmniiCare 

Aviion  3650, 3700, 8600  and  8700  machines  running 
SQL  Server  7.0 

Hewlett-Packard 

Mission  Critical  Server  Suite  for  Windows  NT 

NetServer  LXr  8000 

IBM 

99.9%  Availability  Program 

NetFinity 

Unisys 

Not  announced  yet 

Aquanta  ES 

Note:  All  vendors  guarantee  99.9%  availability,  with  the  exception  of  Compaq,  which  offers  99.5%  to  99.9%. 
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more  capacity,  quick  With  the  fastest  data-transfer  services  available,  U  S  WEST  will  help  you 
which  network  system,  or  upgrade,  is  right  for  you.  Well  integrate  them  seamlessly  and  show 


you  how  to  maintain  system  flexibility  in  the  future.  (Very  important  considering  the  first  law  of  IT  Management:  data  always  expands 
to  fill  the  bandwidth  available.)  We  also  provide  expert  technical  support,  24  hours  a  day,  seven  days  a  week.  And  here’s  a  reason 
to  think  even  faster:  right  now,  we’re  offering  free  installation  with  purchase  of  Frame  Relay,  ATM  Cell  Relay  or  LAN  Switching. 


FREE  INSTALLATION  WITH  YOUR  ORDER4 
1 -800  -  DATA- USW  or  www.uswest.com 


LIJCWEST 


life's  better  here 


‘Offer  expires  3-31-99.  Minimum  contract  required.  Offer  good  for  new  and  current  FCC  interstate  business  customers. 

Free  Product  info  enter  NWInfoXpress  #8  online  @  www.networkworld.com/infoxpress 
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Infrastructure  Special  Focus 


INTEROPERABILITY 

Users:  Standards  bodies  key 
to  IP  application  rollouts 


BY  SANDRA  GITTLEN 

Brad  Williams  is  not  really  a  standards  watcher. 
His  job  as  senior  telecommunications  specialist 
at  Pier  1  Imports,  a  large  chain  of  retail  stores, 
keeps  him  too  busy  to  stay  abreast  of  the  stan¬ 
dards  bodies.  But  Williams  and  other  network 
managers  agree  that  while  applications  for  run¬ 
ning  voice,  videoconferencing  and  virtual  private  net¬ 
works  (VPN)  over  IP  exist,  they  are  almost  useless 
without  infrastructure  standards. 

Net  managers  say  their  top  concerns  are  the  lack 
of  service  guarantees  for  traffic  running  outside  ser¬ 
vice  provider  networks,  a  dearth  of  true  end-to-end 
security  options  and  the  multitude  of  disconnected 
telephony  initiatives.  And  they  think  all  these  prob¬ 
lems  could  be  cured  by  standards. 

Williams,  whose  company  has  a  large  frame  relay 
network,  had  not  been  charmed  by  the  lure  of  IP  He 
believes  IP  is  not  secure  or  stable  enough  to  handle 
the  chain’s  highly  sensitive  traffic  needs. 

“To  roll  out  voice  over  IP  and  videoconferencing, 
you  need  quality  of  service,”  Williams  says.  “If  you 
don’t  have  QoS,  then  you  can’t  guarantee  the  quality 
of  that  data.” 

The  Multi-protocol  Label  Switching  (MPLS)  technol¬ 
ogy,  which  is  making  its  way  through  the  Internet 
Engineering  Task  Force  (IETF),  is  expected  to  be  the 
foundation  for  QoS  on  the  Internet.  MPLS  is  a  traffic 
engineering  technique  that  adds  a  label  to  IP  packets. 
The  label  guides  the  packets  through  the  Internet 
using  pre-established  paths. As  a  result,  traffic  is  more 
predictable  and  scalable,  which  is  critical  for  ISPs  that 
offer  users  service-level  agreements  (SLA). 

“MPLS  is  the  most  crucial  standard  that  needs  to 
be  finalized  this  year,”  says  Eric  Hinden,  senior  analyst 
at  The  Yankee  Group  in  Boston.  “It’s  what  is  going  to 
enable  providers  to  roll  out  better  services  and  SLAs 
for  users.” 

Today’s  SLAs  usually  do  not  cover  traffic  that 
leaves  a  user’s  service  provider  network.  But 
Williams  says  time-sensitive  traffic  can’t  be  disrupted 
by  an  exchange  between  ISP  networks.  “Once  the 
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data  leaves  your  ISP,  that  ISP’s  not  responsible  for  it,” 
Williams  says.  “Well,  who  is?” 

MPLS  will  solve  this  problem  with  a  standard  traf¬ 
fic-forwarding  technology  that  all 
ISPs  and  gear  vendors  can  imple¬ 
ment.  Riding  on  top  of  MPLS  will 
be  standardized  classes  of  service 
that  ISPs  can  offer  as  guaranteed 
service  levels. 

While  IETF  Chair  Fred  Baker 
says  parts  of  the  MPLS  standard 
could  be  approved  by  the  summer, 

ISPs  such  as  GTE  Internetworking 
say  real-life  implementations  have 
to  be  tested  before  services  can  be 
rolled  out. 

Services  aside,  Dave  Norton,  a 
former  systems  administrator,  says  a 
more  critical  piece  of  the  DP  puzzle 
is  security.  Norton,  who  is  a  security 
consultant  at  distributed  computing  company  Sprint 
Paranet,  and  other  network  managers  are  anxiously 
awaiting  the  IP  Security  (IPSec)  protocol,  which  is 
being  finalized  by  the  IETF. 

“The  lure  of  the  Internet  for  servicing  remote 
users  is  too  tempting  not  to  consider  IPSec,”  Norton 
says.  He  adds  that  today’s  security  options  are  “cob¬ 
bled  together,”  leaving  users  with  a  hodgepodge  of 
security  access  points. 

Unlike  today’s  approaches  that  handle  security 

through  applications, 

IPSec  tackles  security  at 
the  network  layer,  when  a 
connection  is  estabfished. 
This  allows  for  authentica¬ 
tion  of  the  user  and  en¬ 
cryption  of  data  in  one 
pop.  Security  can  be  set 
up  without  requiring 
changes  to  an  end  user’s 
computer  if  the  client  sup¬ 
ports  IPSec. 


All  these  security  improvements  make  IPSec  the 
logical  choice  for  handling  end-to-end  security  in 
VPNs.  AD  the  parts  of  the  IPSec  protocol  will  not  be 
completed  until  summer. 

But  the  need  for  end-to-end  security  brings  with 
it  some  problems. 

For  example,  IPSec  requires  packets  to  have 
unique  IP  addresses  identified  from  host  to  destina¬ 
tion.  However,  some  net  administrators  are  employ¬ 
ing  network  address  translators  (NAT)  to  combat 
the  dearth  of  IPv4  Class  A  addresses.  NAT  boxes  sit 
in  a  network  and  dynamically  assign  IP  addresses  to 
packets  from  a  pool  of  IP  addresses.  Because  the 
addresses  are  neither  unique  nor  constant,  they 
blow  holes  in  IPSec’s  security  guarantees. 

Dwight  Gibbs,  chief  technical  fool  at  online  invest¬ 


ment  education  company  The  Motley  Fool,  says  this 
problem  is  fortuitous  because  it  could  speed  the  roll¬ 
out  of  the  plodding  IPv6  standard.The  next  version  of 
IP  increases  the  amount  of  addresses  that  can  be  dis¬ 
tributed,  has  built-in  chargeback  mechanisms  to  bill  for 
traffic  and,  with  DPSec,  could  feature  built-in  security. 

“The  IPv6  rollout  has  to  happen,”  Gibbs  says. 
“Internet  growth  is  not  going  to  be  constrained  by  a 
lack  of  Class  A  addresses  .’’The  IETF’s  Baker  agrees 
that  IPSec  might  just  be  the  fuel  needed  to  light  a 
flame  under  IPv6. 

Net  administrators  are  reluctant  to  make  the 
switch  from  IPv4  to  IPv6.  They  say  it  wifi  take  a  lot 
of  work,  from  changing  network  interface  cards  to 
redrawing  network  maps  to  reconfiguring  hardware 
and  software.  Net  managers  also  say  there  are  not 
enough  products  requiring  IPv6  to  make  it  worth 
their  while. 

But  Pier  l’s  Williams  says  he’d  consider  switching 
over  if  there  were  good  tools  on  the  market  to  help 
him.  “You  need  something  to  do  the  translation 
between  IPv4  and  IPv6.”  S 


"Internet  growth  is 
not  going  to  be  con¬ 
strained  by  a  lack  of 
Class  A  addresses." 


Dwight  Gibbs,  chief  technical  fool, 
The  Motley  Fool 


" The  lure  of  the 
Internet  for 
servicing  remote 
users  is  too 
tempting  not  to 
consider  IPSec." 

Dave  Norton,  security  consultant, 
Sprint  Paranet 
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ThinkPad  560  9 

4.2  lbs* 

$2,699f 

mobile  Pentium®  II 

6.4gb  hard  drive 

external  cd  drive 

1.2“  thin* 

processor  300  mhz 

64mb  memory 

port  replicator 

ThinkPad  390 
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e-business  tools 


$1,799f  Pentium®  processor  with  3.2gb  hard  drive  12.1"  active  matrix  display  SmartCard  security  kit 

MMX™  technology  233  mhz  32mb  memory  integrated  floppy/cd  drive  port  replicator 

integrated  stereo  sound 


ThinkPad  600  % 


speed 
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mobile  Pentium®  II 

5  lbs* 

$3,999T 

6.4gb  hard  drive 

13.3"  active  matrix  display 

docking  station 

processor  300  mhz 

1.4"  thin* 

64mb  memory 

swappable  drive/battery  bay 
dvd  drive,  SRS  3D  sound 

SuperDisk  (LS-120)  drive 

thinkpad. power  suit 
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Does  it  really  matter  what  notebook  you  carry? 

Or  give  to  your  people?  Or  use  to  present  your  ideas? 
These  are  fair  questions. 

In  business  today,  the  tools  you  and  your  people  need  to  access  and  manage  your 
business  take  on  a  whole  new  level  of  importance.  They  become  not  only  workhorse 
but  lifeline  -  the  keys  to  the  kingdom,  your  mobile  mission  control.  This  isn’t  just 
about  doing  spreadsheets  at  home,  or  doing  e-mail  on  a  plane.  This  is  about  actively 
running  all  the  aspects  of  a  business,  or  a  department,  or  a  supply  chain  from  a 
small  black  box  you  can  hold  in  your  hand.  This  is  ThinkPad! 

Pick  one  up  and  you’ll  feel  solid,  tight  construction, 
like  a  well-made  tool  built  to  last. 

Choose  a  ThinkPad.  Any  ThinkPad.  Throw  it  in  your  bag.  Pull  it  out  of  a  taxi  trunk. 

Plug  it  into  that  hotel  jack.  Start  it  up.  Dial  in.  You’re  back  at  work.  Type  on  it  for  a  few  hours. 
The  more  you  use  the  keyboard,  the  more  you’ll  like  it.  Switch  from  two  batteries 
to  one  battery  and  a  Zip  drive.  Pull  the  Zip  and  put  in  a  DVD.  Plug  into  a  black,  flat-panel 
monitor  at  the  office  and  let  them  eat  their  hearts  out.  Park  a  docking  station  on 
your  desk  and  never  mess  with  cables  again.  This  is  engineering.  This  is  ThinkPad. 

Feeling  more  responsible  than  indulgent?  Good. 

The  ThinkPad  notebook  you  want  costs  less  than  you  think,  with  fully  equipped  models 
starting  at  $1799!  Own  one  and  you’ll  feel  wildly  responsible.  Because  you,  your 
work  and  your  ThinkPad  are  backed  by  IBM.  Not  just  by  global  IBM  24x7  phone  support, 
but  by  EasyServ,™  our  door-to-door  depot  repair  service!  Better  yet,  consider 
SystemXtra™  the  best  of  IBM  financing,  service,  support,  upgrade  and  training  options, 
completely  customizable  to  fit  the  size  and  needs  of  your  business,  all  consolidated 
into  one  monthly  bill?  This  is  IBM. 

ThinkPad.  This  is  a  tool  that  matters. 

www.ibm.com/thinkpad  or  800  426  7255,  ext.  5029 
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•Actual  weight/thinness  may  vary  due  to  vendor  components,  manufacturing  process  and  options.  Includes  battery  (and  travel  cover  on  ThinkPad  600  models)  and  excludes  external  diskette,  cd/dvd  drives,  if  applicable. 
'  Estimated  reseller  price  for  ThinkPad  models  (excluding  options)  390/20U,  560/BOU,  600/55U.  Actual  prices  may  vary  ’Excluding  certain  holidays.  Response  time  will  vary.  Available  in  most  North  American  locations 
for  no  additional  charge  during  the  warranty  period.  The  customer  may  be  asked  diagnostic  questions  before  a  courier  is  sent.'SystemXtra  is  available  to  commercial  and  slate/local  government  customers  with  valid 
credit.  Leasing  is  based  on  minimum  qualifying  level  of  $1,000  of  IBM  PSG  hardware.  Program  is  subject  to  change  without  notice.  Additional  terms,  conditions  and  limitations  may  apply.  IBM  Global  Financing  offerings 
are  made  available  through  IBM  Credit  Corporation  in  the  U.S  and  other  subsidiaries  and  divisions  worldwide,  mhz  denotes  microprocessor  internal  clock  speed  only;  other  factors  may  also  affect  application  performance. 
gb=billion  bytes  for  HDD  capacity.  For  terms/conditions  or  a  copy  of  IBM's  Statement  of  Limited  Warranty,  call  800  772  2227  in  the  U.S.  In  Canada,  call  800  426  2255.  PCs  in  this  ad  include  an  operating  system. 
IBM  product  names  are  trademarks  of  International  Business  Machines  Corporation.  Intel  Inside  and  Pentium  are  registered  trademarks  and  MMX  is  a  trademark  of  Intel  Corporation  ©1999  IBM  Corp.  All  rights  reserved. 


Briefs 


The  Supreme  Court  last  week 
allowed  a  class-action  lawsuit 
against  AT&T's  mobile-phone 
billing  practices  to  go  forward. 

The  suit  by  users  in  Washington 
state  seeks  to  end  AT&T's  prac¬ 
tice,  common  in  the  wireless 
industry,  of  rounding  up  toll 
charges  to  the  next  minute.  The 
Supreme  Court  didn't  rule  on  the 
case  but  dismissed  AT&T's  argu¬ 
ment  that  only  federal  authorities 
can  deal  with  mobile  prices.  As  a 
result,  a  Washington  court  can 
rule  whether  the  pricing  practice 
is  misleading.  In  wireline  tele¬ 
phony,  rounding  up  to  the  minute 
has  become  rare  in  business  and 
less  common  for  consumers. 

Ameritech  said  last  week  it  will 
acquire  the  data  network  design 
and  consulting  unit  of  Anixter  for 
$200  million.  At  the  end  of  March, 
Ameritech  will  get  1,200  data  net¬ 
working  integrators  and  designers 
from  Anixter.  Ameritech  needs  the 
additional  personnel  to  meet  busi¬ 
ness  data  demands,  which  the 
firm  says  grew  32%  last  year. 
Ameritech  also  gets  the  Anixter 
unit's  business,  making  Ameritech 
the  top  U.S.  carrier  reseller  of 
Cisco,  Nortel  Networks  and  3Com 
data  equipment. 

WaveSpan  this  week  will  an¬ 
nounce  Stratum  100,  a  wireless 
access  system  that  let  users  con¬ 
nect  multiple  Ethernet  LANs  with¬ 
in  a  2.5-mile  radius  at  100M  bit/ 
sec.  Stratum  100  will  let  users 
send  voice  and  data  traffic  over 
the  U-NII  unlicensed  wireless 
band.  Because  the  wireless  spec¬ 
trum  is  unlicensed,  users  will  not 
have  to  pay  monthly  bills  to  a  ser¬ 
vice  provider.  While  the  Stratum 
100  is  based  on  wireless  technol¬ 
ogy,  WaveSpan  says  it  is  not 
adversely  affected  by  bad  weath¬ 
er.  It  will  be  available  this  month 
for  $44,950,  with  two  antennas, 
two  radios  and  two  indoor  units. 

WaveSpan:  (650)  919-0190 
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Can  EDS  pull  together  MCl's  back  office? 


I'll  trade  you  my  IT  for  your  network 

Under  the  MCI  WorldCom-EDS  transaction,  both  companies 
get  more  of  what  they  already  specialize  in: 

•  MCI  WorldCom  outsources  its  entire  internal  IT  infrastructure  and  most 
of  its  applications  development  to  EDS.  Value:  $5  billion  to  $7  billion 
over  10  years. 

•  EDS  outsources  the  bulk  of  its  global  network  to  MCI  WorldCom. 
Value:  $6  billion  to  $8.5  billion  over  10  years. 

•  EDS  acquires  MCI  Systemhouse.  Value:  $1 .65  billion. 

•  EDS  and  MCI  WorldCom  to  bid  jointly  on  enterprise  outsourcing  deals. 
Value:  To  be  seen. 


BY  DAVID  ROHDE 

JACKSON,  MISS.  —  EDS  is  an  old  friend 
to  MCI  WorldCom  CEO  Bernard  Ebbers. 
The  outsourcing  company  has  been  doing 
the  bulk  ofWorldCom’s  billing  work  and 
running  much  of  its  back-office  systems 
for  many  years. 

Now  EDS  faces  the  biggest  challenge 
Ebbers  has  ever  thrown  its  way  —  inte¬ 
grating  and  managing  the  former  MCl’s 
systems  as  well. 

Ebbers  earlier  this  month  tapped  EDS 
to  all  but  take  over  MCl’s  IT  infrastructure. 
As  part  of  the  move,  Ebbers  also  sold  the 
merged  company  ’s  struggling  outsourcing 
division,  MCI  Systemhouse,  to  EDS  and 
arranged  for  the  two  firms  to  jointly  sell 
and  service  large  outsourcing  contracts. 

Turning  over  acquired  networks  to  EDS 
is  an  old  habit  for  WorldCom,  analysts  say. 
But  the  deal  represents  a  big  change  for 
the  MCI  side  of  the  house,  whose  12,000 
software  engineers  and  other  IT  profes¬ 
sionals  have  been  the  force  behind  the 
carrier’s  integrated  billing,  sales  automa¬ 
tion  and  specialized  application  projects. 

The  bulk  of  those  employees  will  go  to 


BY  DENISE  PAPPALARDO 

HAMILTON,  BERMUDA  —  There  are 
vast  differences  between  how  enterprise 
users  and  service  providers  run  their  net¬ 
works,  but  there  is  one  problem  they 
share:  how  to  keep  up  with  the  increasing 
demand  for  bandwidth. 

One  plan,  Project  Oxygen,  is  expected 
to  eventually  help  users  and  service 
providers.  Project  Oxygen  is  a  network 
that  will  offer  service  providers  network 
capacity,  from  1.24G  to  100G  bit/  sec, 
around  the  world. When  it  is  completed  in 
2002,  the  net  will  link  businesses  in  the 
U.S.  with  firms  in  more  than  78  countries. 

Project  Oxygen  is  similar  to  the  under¬ 
sea  cable  networks  that  carriers  buy 
capacity  from  today,  but  those  systems 
only  provide  point-to-point  network 
capacity.  Project  Oxygen  promises  broad¬ 
band  access  for  a  single  price  to  all  coun¬ 
tries  its  net  reaches. 

But  to  achieve  such  lofty  goals,  develop¬ 
ers  need  to  drum  up  a  lot  of  cash.  Project 
Oxygen’s  Chairman  and  CEO  Neil  Tagare 


EDS,  while  MCI  WorldCom  will  receive 
1 ,000  employees  who  ran  EDS’  WANs,  as 
part  of  a  giant  asset  swap  (see  graphic). 

MCI  WorldCom  customers  are  bracing 
for  a  new  round  of  transitions,  particularly 
in  the  billing  arena.  Since  the  merger, 
billing  errors  have  increased  and  resolu¬ 
tion  time  has  been  dragged  out  to  four  or 
five  months,  says  Andrew  Stratford,  direc¬ 
tor  of  telecommunications  for  Congress 
Financial,  a  specialized  commercial  lender 
in  New  York. 

“There  are  too  many  unconcerned,  too 


first  said  he  expected  to  have  most  of  the 
project’s  funding  by  the  end  of  last  year. 

The  first  phase  of  Project  Oxygen  is 
expected  to  cost  $10  billion.  Of  that,  $3 
billion  is  expected  to  be  in  Project 
Oxygen’s  hands  by  the  end  of  the  second 
quarter,  Tagare  says.  A  total  of  $  1  billion 
will  come  from  equity  investments,  and 
$2  billion  will  come  from  bank  loans. 

A  large  portion  of  the  remaining  first- 
phase  money  will  come  from  selling  net¬ 
work  capacity  to  service  providers. 
Carriers  can  buy  capacity  on  the  Project 
Oxygen  network  for  between  $10  million 
and  $200  million,  but  they  will  not  be  able 
to  send  traffic  over  the  network  until 
sometime  between  2000  to  2002. 

While  these  carriers  don’t  have  to  put 
any  money  down,  40  have  signed  “memo¬ 
randums  of  understanding,”  which  state 
the  service  providers’  intentions  to  buy 
capacity  on  the  Project  Oxygen  network, 
Tagare  says.  He  declined  to  identify  any 
domestic  carriers  that  have  committed 
money  to  the  project. 

Project  Oxy  gen:  (44 1 )  296-9999 


many  completely 
inept  hands  involved 
already,”  Stratford  says. 
“I  don’t  think  the 
answer  is  really  to 
change  to  a  different 
[company] .” 

And  while  MCI 
WorldCom  Vice  Chair¬ 
man  John  Sidgmore 
and  EDS  Chairman 
Dick  Brown  say  their 
agreement  to  jointly 
sell  and  service  out¬ 
sourcing  deals  should 
boost  revenue,  they  may  have  to  watch 
out  for  poaching  of  existing  Systemhouse 
and  EDS  customers  by  competitors. 

“Almost  all  large,  important  outsourc¬ 
ing  contracts  have  a  change-of-control 
clause,”  says  Rick  Roscitt,  president  of 
AT&T  Solutions,  which  analysts  credit 
with  besting  MCI  Systemhouse  for 
recent  big  contracts.  “I  think  a  lot  of 
their  clients  are  dusting  off  their  con¬ 
tracts  and  reading  what  they  have.  We’re 
going  to  get  a  lot  of  calls.” 

Within  MCI  WorldCom,  the  biggest 
impact  of  the  EDS  deal  will  likely  be  on 
MCl’s  huge  IT  staff  in  Colorado  Springs. 
Sidgmore  and  Brown  did  not  rule  out 
the  possibility  that  a  few  employees  may 
not  find  places  in  EDS. 

EDS  will  have  a  big  job  ahead  inte¬ 
grating  MCl’s  systems  with  WorldCom’s. 
“MCl’s  back-end  systems  are  a  mess,” 
says  Jim  Freeze,  senior  telecom  analyst  at 
Forrester  Research  in  Cambridge,  Mass. 
Lance  Boxer,  former  MCI  chief  informa¬ 
tion  officer  and  now  a  division  president 
at  Lucent,  said  at  the  ComNet  show  in 
January  that  MCI  still  employs  more  than 
100  billing  systems. 

MCI  WorldCom  does  get  the  EDS  net 
to  add  to  its  already  huge  collection  of 
network  facilities.  EDS  offers  circuit- 
switched  telephone,  frame  relay,  ATM, 
private  lines  and  managed  bandwidth 
services,  plus  IP  and  very  small  aperture 
terminals.  \A 


Project  Oxygen  to  answer  bandwidth  demands 
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i  A  true  enterprise 

isf  class  server  that 
provides  exceptic 
performance, 
reliability  and 
H  manageability. 

Intel®  Pentium®!!  Xeon™  processor,  400MHz  o 


50MHz 


I/O  Expansion  Slots 


Seven  (7)  total:  six  (6)  32-bit  PCI  slots,  one  (1)  PCI/ISA 
shared,  one  (1)  PCI  slot  occupied  with  network  interface 
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MAGNIA  7000  SERIES 


Upgradeability 

Quad  processing  capable,  one  (1)  processor  standard 

Cache 

— — ~  .  ,  •  , 

512KB,  1MB  or  2MB  internal  second  level  ECC  cache 

Memory 

256MB  buffered  ECC  EDO  DRAM  (4GB  max) 

Storage  Bays  Four  (4)  front  accessible  bays:  one  (1)  3.5”  drive^gf3®*^ 

(occupied  with  3.5”  floppy),  three  (3)  5.25”  half-height 
^  (one  (1}  occupied  with  CD-ROM),  six  (6)  3.5”  hot-swap 

JwL  MAX-  SC  A  bays  with  1”  height  support.  Optional  second  cage 

tt)  supports  six  (6)  additional  1”  hot-swap  drive  bays.  All 

"yf  '  hot-swap  drive  bays  support  ultra2-wide  SCSI-3  (LVDS) 

specification 

Hot-Swap  Capacity 

54GB  using  9GB  1”  devices  or  108GB  with  optional 
second  hot-swap  cage 
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Wan  Monitor  .  Daniel  Briere  and  Christine  Heckart 

A  DEN  for  the  BEASP 


Bn  our  last  column,  we  discussed 
what  TeleChoice  believes  is  the 
next  big  step  in  the  evolution  of  net¬ 
working:  the  Broadband  Enabled  Appli- 


frfiB 


cation  Service  Provider  (BEASP  or  ASP). 
The  ASP  will  provide  a  package  of  appli¬ 
cations,  software,  support  and  commu¬ 
nications  as  part  of  an  integrated  ser¬ 


vice.  These  services  will  probably  be 
designed  for  specific  customer  groups 
or  markets,  and  many  will  take  the  form 
of  extranets  that  provide  a  complete 
method  for  connecting  supply  chains. 

One  important  initiative  aimed  at  con¬ 
solidating  services  and  applications  is 
the  development  of  Directory  Enabled 


Network  (DEN).  DEN  is  not  yet  a  stan¬ 
dard,  but  it  is  an  open  network  architec¬ 
ture  being  developed  by  Microsoft  and 
Cisco.  It’s  intended  to  integrate  a  com¬ 
pany’s  data  network  and  directory  to 
make  nets  easier  to  manage  and  grow. 

A  major  benefit  of  DEN  is  the  im¬ 
proved  network  intelligence  that  results 
when  remote  devices  can  swap  informa¬ 
tion  with  other  devices.  Think  of  Star 
Trek’s  Borg.  Alone,  a  Borg  had  limited  in¬ 
telligence,  but  every  Borg  knew  the  loca¬ 
tion  and  thoughts  of  every  other  Borg.  So 
the  Borg’s  ability  to  coordinate  and  direct 
resources  in  real  time  was  exceptional. 

In  Kevin  Kelly’s  book,  New  Rules  for 
the  New  Economy,  he  discusses  the 
power  of  connecting  all  things  large  and 
small  to  a  global  network.  It  takes  some¬ 
thing  such  as  DEN  to  make  this  happen 
and  to  bring  about  the  benefits  to  the 
economy  and  society  Kelly  describes. 

DEN  will  also  be  used  to  usher  in  an 
era  of  policy-based  networking.  Use  of 
network  resources  is  profile-driven,  pro¬ 
viding  the  ability  to  identify  a  user  and 
map  him  to  a  set  of  approved  resources 
and  security  requirements.  Why  is  this 
important?  Today  there  is  no  good  link 
between  the  net  and  user  or  application 
requirements.  The  important  customer 
order  from  your  Web  site  is  treated  the 
same  as  the  spam  you  receive. 

Extranet  services  will  need  a  strict  pri¬ 
oritization  of  network  resources  based 
on  user,  time  of  day,  application  or  any 
number  of  factors.  The  glue  for  tying  a 
user  or  device  to  a  policy  system  and 
network  resource  is  the  directory. 

DEN  has  the  potential  to  be  the  sig¬ 
naling  system  for  IP  networks,  linking 
policy  management  systems  with  net¬ 
work  resources.  Signaling  will  be  a  criti¬ 
cal  network  component  to  the  ASP 
because  it  helps  link  a  physical  network 
to  a  hosted  application,  thus  forming  a 
foundation  for  extranet  and  applications- 
based  services. 

But  DEN  isn’t  yet  being  worked  on  by 
the  IETF.  And  although  Cisco  and  Micro¬ 
soft  are  throwing  their  weight  behind 
DEN  development  and  service  pro¬ 
viders,  such  as  Qwest,  are  supporting  it, 
there’s  still  a  lot  of  work  to  be  done. 

So  what  can  you  do  to  position  your¬ 
self  to  take  advantage  of  DEN  when  it 
arrives?  Start  organizing  your  net  re¬ 
sources  and  business  processes  around 
directories.  As  you  build  directories, 
make  sure  they  are  Lightweight  Direc¬ 
tory  Access  Protocol  3-compliant  and 
extensible.  This  will  position  you  to  take 
advantage  of  virtual  private  networks 
with  early  quality-of-service  capabilities 
and  position  you  to  eventually  exchange 
security  and  network  resource  informa¬ 
tion  automatically  between  your  local 
network  and  your  WAN  service  provider. 

Briere  is  president  and  Heckart  is 
vice  president  of  TeleChoice,  a  consul¬ 
tancy  in  Boston.  They  can  be  reached  at 
dbriere@telechoice.com  and  checkart @ 
telechoice.com,  respectively. 
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Program  Overview 

Implementing  a  fully  converged 
network  requires  the  careful 
orchestration  of  a  number  of 
elements  including  terminals,  voice 
and  video  codecs,  gatekeepers  and 
gateways  to  other  networks.  And  for 
a  successful  implementation,  you 
need  all  of  those  components  to 
interoperate  -  an  awesome  task  that 
involves  adherence  to  a  multitude  of 
standards. 

Instruction  and  guidance  are  what 
you  need  to  accomplish  this  goal. 
Specifically,  you  need  a  complete 
understanding  of  the  multimedia 
applications  requiring  integrated 
voice/data/video/fax  transmission, 
the  network  architectures  necessary 
to  support  those  applications  and 
the  standards  in  place  to  ease  your 
interoperability  concerns.  This 
seminar  will  teach  you  the  steps  to 
designing  and  implementing  an 
integrated  network  that  delivers 
cost  savings  and  increased 
manageability. 

Presented  by  Mark  A.  Miller,  P.E., 
DigiNet  Corporation 
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TECHNICAL  SEMINARS 


Benefits  of  Attending 

•  Understand  the  key  driving  factors 
behind  the  Voice  over  IP  initiatives: 
client  applications  and  economic 
benefits 

•  Realize  the  importance  of 
implementation  agreements  and 
interoperability  testing  for  a 
successful  roll-out  of  these 
services 

•  Understand  how  the  multimedia 
standards  for  audio/video  coding, 
signaling,  and  call  management  fit 
together 

•  Understand  how  Quality  of  Service 
(QoS)  issues  become  key  factors  for 
a  successful  multimedia  network 
implementation 

•  Understand  how  network  traffic 
patterns  can  impact  a  Voice  over  IP 
implementation 

•  Speak  with  representatives  of 
sponsoring  companies  and  see  live 
demonstrations  of  desktop 
multimedia  applications 


(800)643-4668 

www.nwfusion.com/seminars 


Learn  From 
The  Leader 

Network  World  Technical  Seminars  is 
known  throughout  the  networking 
community  for  providing  IT 
professionals  with  expert,  unbiased 
education  on  the  latest  technologies 
and  trends  shaping  today’s  mission- 
critical  networks.  This  reputation 
combined  with  our 
1 00%  satisfaction 
guarantee  makes  us 
the  educator  of 
choice  in  the 
networking  industry. 
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1999  Seminar  Tour 

Boston  •  February  1 0 
New  York  •  February  1 1 
San  Francisco  •  February  24 
Los  Angeles  •  February  25 
Chicago  •  March  23 
Dallas  •  March  24 
Atlanta  •  April  7 
Washington,  DC  •  April  8 


Register  Today! 

Seminar  Registration  Fee  —  $450 

Bring  your  colleagues  and  take 
advantage  of  our  Team  Discounts 

2  registrants  $400  each 
3  registrants  $350  each 
Even/  4th  reaistration  is  FREE 


Enterprise 


Briefs 

Security  Dynamics  Technolo¬ 
gies  next  month  will  make  its 
SecurlD  user-authentication 
product  available  on  smart 
cards. 


SecurlD  comes  to  smart 
cards. 


The  smart  card  support  is  the 
result  of  a  technology  agreement 
with  smart  card  manufacturer 
Gemplus.  The  smart  card  version 
of  SecurlD,  which  will  cost  $40, 
can  be  used  for  various  applica¬ 
tions,  such  as  electronic  badges 
for  employee  access. 

Security  Dynamics:  (800)  732- 
8743 

VeriFone's  Internet  credit  card 
processing  software  products 
for  merchants  and  banks,  called 
vPOS  and  vGate,  have  passed 
compliance  tests  for  the  Secure 
Electronic  Transaction  (SET)  pro¬ 
tocol.  The  SET  protocol  was 
developed  by  MasterCard  and 
Visa  with  backing  from  the  high- 
tech  industry. 

Network  management  vendor 
Micromuse  recently  appointed 
Gregory  Brown  as  chairman  and 
CEO  of  the  company.  Brown  suc¬ 
ceeds  Stephen  Allott,  who  has 
been  the  company's  interim  CEO 
since  October. 

Allott  will  continue  to  serve  as 
president  and  chief  financial 
officer. 

Brown  served  as  president  of 
Ameritech's  custom  business 
services  division  since  1996  and 
was  president  of  Ameritech's 
new  media  division  for  three 
years. 


Trio  tackles  apps  management 


Measuring  applications 

These  vendors  are  extending  their  application  management 
software: 

Vendor  Product 

Price 

Availability 

Apptitude  Visualizer 

Starts  at  $27,000 

March 

Concord  Network  Health 

Agent  undisclosed 

Second  half  1999 

Envive  Collaborative  SLS 

Starts  at  $37,500 

Now 

Envive  Operations  Datamart 

$10,000 

Now 

BY  JEFF  CARUSO 

Network  managers  trying  to 
determine  how  well  their 
applications  and  networks  are 
performing  together  will  get  some  help 
from  three  vendors’  upcoming  products. 

Apptitude  will  ship  Visualizer  probe, 
which  tracks  who  is  using  corporate 
applications  and  how  well  the  applica¬ 
tions  are  performing.  Envive  has  expanded 
its  software  for  monitoring  SAP  R/3,  and 
Concord  Communications  says  it  will 
license  application  management  agent 
technology  from  FirstSense  Software. 

Application  management  is  a  good  way 
to  determine  how  much  network  capa¬ 
city  is  needed,  says  Pat  Rauchet,  director 
of  telecommunications  at  Sony  Electron¬ 
ics,  which  is  an  early  user  of  Apptitude ’s 
product.  With  Visualizer,  the  company  saw 
how  much  traffic  its  critical  applications 
were  creating  across  some  of  its  WAN 
links  and  found  it  didn’t  need  as  much 
WAN  capacity  as  it  had,  Rauchet  says. 

Apptitude,  formerly  known  as  Tech¬ 
nically  Elite,  is  releasing  Visualizer  this 
month.Companies  can  deploy  the  probe 


on  critical  links 
to  identify  appli¬ 
cation  traffic 
moving  at  up 
to  100M  bit/ 
sec;  determine 
which  users  are 
sending  the 
most  traffic;  and 
view  the  traf¬ 
fic’s  impact  on 
the  net. 

Apptitude,  in 
San  Jose,  also  offers  a  Web  interface  to 
display  the  data  collected  by  the  probes. 
In  future  releases,  the  company  plans  to 
enable  Visualizer  to  measure  the  levels 
of  service  applications  are  receiving. 
Pricing  starts  at  $27,000  for  two 
Visualizer  probes  and  the  Web  interface. 

Envive,  of  Mountain  View,  Calif.,  re¬ 
cently  announced  Collaborative  Service 
Level  Suite,  which  unifies  the  company’s 
different  software  products  for  watching 
SAP  R/3  applications.  The  suite  includes 
Inspector  2.0,  which  monitors  applica¬ 
tion  events;  Service  Level  Manager  2.0, 
which  compares  performance  against 


service-level  agreements;  and  Stopwatch 
Pro  2.2,  which  measures  response  time. 
The  suite  is  shipping  now,  with  prices 
starting  at  $37,500. 

Concord,  in  Marlborough,  Mass.,  will 
license  agent  technology7  from  FirstSense 
in  Burlington,  Mass.  FirstSense  s  agent  runs 
on  a  client  and  measures  how  quickly  the 
client  receives  responses  over  a  network. 
Concord  is  developing  an  application, 
due  in  the  second  half  of  this  year,  which 
will  use  the  agent  to  measure  end-to-end 
application  delays.The  application  will  be 
used  in  Concord’s  Network  Health 
reporting  software.  \A 


Outlook  to  peer  into  virtual  meetings 


BY  JASON  MESERVE 

Users  of  Microsoft  Outlook  can 
now  schedule  voice  and  data 
collaboration  sessions,  thanks 
to  MeetingPlace  for  Outlook  from 
Latitude  Communications. 

Announced  today,  the  software  lets 

Let's  meet 


users  schedule  resources  on  Latitude’s 
MeetingPlace  conference  server  from 
Outlook’s  scheduling  agent.  In  addition 
to  scheduling  server  space,  the  system 
sends  out  e-mail  invitations  to  would-be 
attendees.  The  e-mail  contains  a  link  for 
point-and-click  access  to  the  virtual 
meeting.  Outlook  users  can  have  their 
calendars  auto¬ 
matically  populat¬ 
ed  with  the  con¬ 
ference  details. 

By  integrating 
with  Windows  NT- 
based  Web  serv¬ 
ers,  MeetingPlace 
can  generate  an 
HTML  page  for 
each  conference. 
The  page  contains 
access  informa¬ 
tion  and  links  to 
documents  that 
are  attached  to 
the  conference. 

Latitude  offi¬ 
cials  see  real-time 


conferencing  as  a  natural  progression  of 
technology.  “Groupware  is  limited  to 
e-mail  and  discussion  threads,  so  there  is 
a  need  for  real-time  collaboration,"  says 
Michael  Fratesi,  group  product  manager 
at  Latitude.  “We  see  a  natural  interplay 
between  real-time  and  asynchronous 
communication.” 

“[MeetingPlace  for  Outlook]  will 
make  things  a  lot  simpler  for  us,  espe¬ 
cially  on  the  help  desk  side,”  says  Jon 
Holmes,  MeetingPlace  administrator  for 
Cambridge  Technology  Partners.  Holmes 
plans  to  roll  out  the  software  to  approx¬ 
imately  4,500  employees. 

MeetingPlace  lets  people  share  data  in 
real  time  during  a  conference  call.  Con¬ 
ference  attendees  use  the  phone  for  the 
audio  portion  of  the  c;dl,  while  data  ex¬ 
change  is  conducted  over  the  Internet 
with  Microsoft  NetMeeting  and  document¬ 
sharing  Java  applets.  For  those  unable  to 
attend,  MeetingPlace  has  the  ability  to 
record  the  session  and  maintain  associated 
documents  for  on-demand  replay. 

Currently  shipping,  MeetingPlace  for 
Outlook  is  available  as  a  $  1 9,995  add-on 
to  MeetingPlace  conference  server.  Pric¬ 
ing  for  the  server  starts  at  $100,000  for 
the  typical  enterprise  deployment. 

Latitude:  (408)  988-7200 


Latitude's  MeetingPlace  for  Outlook  lets  users  schedule  voice 
and  data  conferencing  sessions  on  the  MeetingPlace  conference 
server  directly  from  their  desktops. 


Added  Outlook  tab  dialog  - 
for  scheduling  Meeting 
Place  resources. 

Availability  graph  for  the 
MeetingPlace  conference 
server. 
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Enterprise  Applications 


IN 'SITE:  Lessons  from  Leading  Users 

Electronic  forms  ease  prison  charity's  burdens 


BY  ROBIN  SCHREIER  HOHMAN 

When  Watergate  conspirator  Charles  W  Colson 
founded  Prison  Fellowship  more  than  20 
years  ago,  he  probably  didn’t  envision  die 
paperwork  involved  in  bringing  religion  to 
prisoners.  Prison  Fellowship  has  always  been 
a  grass-roots  effort.  One  of  its  goals  is  to  bring  inmates 
and  their  families  together,  with  the  help  of  religion. 

The  group’s  most  popular  program  is  Angel  Tree, 
a  project  designed  to  deliver  holiday  gifts  to  chil¬ 
dren  of  inmates.  It’s  a  six-month  effort  that  includes 
50,000  volunteers  at  80  field  offices  and  is  coordi¬ 
nated  with  local  churches  nationwide.  Naturally, 
there  is  an  immeasurable  amount  of  paperwork. 

Paper  forms  are  the  key  to  the  Angel  Tree  Project. 
Volunteers  have  to  distribute  the  forms,  750,000  in 
all,  to  prisoners  across  the  country.  Prisoners  then 
complete  the  forms  with  information  about  their 
children.  The  completed  forms  then  go  back  to  the 
local  field  offices,  where  they’re  sorted  and  sent  to 


churches  near  each  child’s  home.  Based  on  the  infor¬ 
mation,  parishioners  at  local  churches  buy  and 
deliver  presents  for  more  than  500,000  kids. 

By  Christmas  1997,  the  manual  process  had 
reached  its  limit,  says  Dave  Fraedrich,  director  of 
application  support  at  the  Reston,  Va.,  headquar¬ 
ters.  Fraedrich  says  Open  Technologies,  a  Phoenix 
value-added  reseller,  suggested  he  try  automating 
the  form  processing  with  Cardiff  Software’s 
Teleform.  Cardiff  makes  software  that  does  optical 
character  recognition  and  converts  paper-based 
forms  to  HTML  and  other  formats. 

The  results  have  been  enlightening.  Last  year’s 
pilot  program  in  four  states  proved  that  Teleform  will 
save  volunteers  thousands  of  labor  hours  each  year. 

The  group  now  uses  a  high-speed  Panasonic  scan¬ 
ner  that  reads  nearly  85  pages  per  minute.  Each  page 
is  saved  as  a  .tif  image.  The  Teleform  reader  then 
extracts  the  data,  interprets  the  characters  and  sends 


Easier  forms 

Cardiff  Software  s  Teleform  processes  information 
from  forms  and  stores  it  in  a  database,  which  can 
be  exported  to  other  files. 

r  Export  data  to - -j 
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■.  .  -  si-  :  ‘ 

fZ  Disable  export  locks 

the  page  to  a  human  verifier. 

The  organization  upgraded  the  network  to  Win¬ 
dows  NT  with  100M  bit/sec  Ethernet  connections. 
It  stored  the  verified  data  on  300-MHz  Pentium  II 
servers  with  dual  processors,  with  a  17G-byte  RAID 
5  array.  The  extracted  data  is  sent  back  to  field 
offices  via  e-mail. 

Prison  Fellowship  can’t  afford  to  spend  too  much 
on  the  net.  So  why  buy  NT,  when  Linux  is  free? 

“We  have  to  stay  to  the  center  of  the  mainstream 
in  computing,”  Fraedrich  says. 

Cardiff:  (800)  659-8755 


You  re  an  IT  manager.  Your  office  is  constantly  full  of  people  who  need  your  help.  On  top  of  that,  you  have  to 

i 

manage  the  separate  transport  for  local,  long  distance  and  international  data  and  voice  needs.  MCI  WorldCom8'1 
lias  a  very  simple  answer:  on-net.  On-net  combines  all  your  voice  and  data  traffic  onto  one  global  network  — 


the  only  global  network  owned  and  operated  by  a  single  company.*  So  whether  your  needs  are  local, 


*  Only  MCI  WorlilCuin  owns  tin-  rutin-  network  from  origin  to  destination  in  litany  locations  worldwide.  Local  sen-ire  available  in  certain  areas.  MCI  WorldCom  is  traded  on  NASDAQ  under  VI  COM.  For  more  infonnuti . .  MCI  WorldCom,  visit  our  ] 

Well  sites  at  mriwui Idroni.roin  and  wroni.t-oin.  ©  IW.  MCI  WORLDCOM,  Inc.  All  Rights  Reserved. 
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'Net  Insider  .  Scott  Bradner 

Sounds  like  failure 


An  editorial  on  ATM  in  the 
February  issue  of  Business 
Communications  Review  helped 
me  to  crystallize  my  thoughts  on 
something  that  has  been  vaguely 
bothering  me  for  a  long  time:  Why 
do  some  ATM  proponents  sound  like 
losers? 

The  editorial,  “ATM:  Networking’s 
Swiss  Army  Knife?”,  is  just  the  sort  of 
thing  I’ve  been  reading  about  ATM  in 
many  publications  for  the  last  few 
years. The  editorial  is  an  assertion  that 
will  be  useful  for  something  any  day 
now.  But  somehow  that  day  is  always 
just  around  the  corner,  even  though 
ATM  is  ready  now. 

The  column  ends  by  saying,  “At 
least  for  now,  however,  ATM  remains 
the  only  technology  that  has  proven 
it  can  deliver  Swiss  Army  knife-like 
functionality  —  a  single  package 


that  can  be  used  for  a  multiplicity  of 
purposes.” 

I’ve  found  this  type  of  thing  some¬ 
how  disconcerting,  though  I  did  not 
know  why.  The  editorial  helped  me 
nail  it  down.  The  ATM  advocates  are 
trying  too  hard. 

I  do  not  see  the  same  sort  of  asser¬ 
tion  of  superiority  from  Gigabit 
Ethernet  or  IP  advocates,  though  a  bit 
of  it  creeps  in  from  time  to  time  on 
the  token-ring  front. 

Devotees  of  most  other  technolo¬ 
gies  think  it’s  better  to  heed 
Shakespeare’s  note  that  “words  are 
not  deeds  .’’They  talk  about  the  things 
they  have  done  rather  than  prophesy 
how  great  things  will  be  in  the 
future. 

Even  when  focusing  on  success 
stories,  articles  about  ATM  somehow 
still  come  across  as  out  of  propor¬ 


tion  to  the  importance  of  the  exam¬ 
ple.  ATM  proponents  want  readers 
to  project  some  global  impact  from 
a  small  hospital  installing  an  ATM 
network. 

I  do  not  know  if  this  behavior  is  as 
prevalent  in  the  ATM  camp  as  I  per¬ 
ceive  it  to  be.  I  may  be  more  sensi¬ 
tive  to  ATM  marketing  being  pre¬ 
sented  in  the  form  of  news  articles 
than  I  am  regarding  other  technolo¬ 
gies.  If  that  is  the  case,  it  might  be 
because  I’ve  been  seeing  it  for  a 
longer  time  with  ATM  than  with 
other  technologies. 

When  a  technology  finds  its  place 
in  the  landscape,  the  number  of 
overhyped  stories  goes  down,  at 
least  in  the  technical  journals.  At 
this  point,  marketing  stories  about 
IP  or  Ethernet  would  seem  very 
much  out  of  place  and  be  seen  as  an 


indication  that  the  author  did  not 
know  all  that  much  about  the  topic. 
ATM  has  not  reached  that  level  of 
maturity  in  spite  of  years  of  work 
and  after  years  of  great  success  in  a 
number  of  areas,  including  in  ISP 
infrastructures. 

It  is  a  bit  hard  to  understand  why 
ATM  advocates  think  they  still  have 
to  try  so  hard.  Maybe  it’s  because 
they  are  unwilling  to  accept  that 
ATM  is  good  at  what  ATM  is  good  at 
and  still  want  to  claim  that  it’s  the 
general  purpose  network  tool. 

Disclaimer:  It’s  far  too  late  for 
Harvard  not  to  overhype.  In  any  case, 
the  above  are  my  observations. 

Bradner  is  a  consultant  with 
Harvard  University’s  University 
Information  Systems.  He  can  be 
reached  at  sob@harvard.edu. 


ery  happy  IT  manager. 
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MCI  WORLDCOM. 
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OIM-NET  SERVICES 


national  or  international,  you  can  deal  with  one  contract  and  one 
account  team.  Period.  You’ll  still  have  to  help  all  those  people  in  your 
office.  But  at  least  now  there’s  someone  to  help  you.  Introducing 
MCI  WorldCom  On-Net.  Visit  our  Web  site  at  wcom.com 
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Free  Product  info  enter  NWInfoXpress  #11  online  @  www.networkworld.com/infoxpress 


If  you  only  know  Compaq  for  PCs  and 
servers,  do  you  really  know  Compaq? 

All  over  the  world,  the  IT 
bedrock  that  companies 
build  on  comes  from 
Compaq.  We’ve  created 
enterprise  systems  for 
18  of  the  top  20  U.S. 
banks.  Over  100  stock 
exchanges  worldwide. 


why  not  go  with  some  of  the  people 
who  know  it  best? 


The  world’s  10 

hrgest  telcos  use  5jxty  percent  of  the 

Comtoaa  enterprise  J  ± 


Compaq  enterprise 

Andlhenext  io.  planet’s  power  generation/ 

And  the  . .  . , 

10  after  that.  distribution  systems. 


Ninety  percent  of  the  world’s 
microprocessor  production. 

And  this  isn’t  just  hardware. 
Compaq  delivers  complete  enterprise 
solutions.  The  mission-critical  systems 
that  keep  business  in  business. 


Who  out-integrates  the  top  integrators? 
Including  IBM? 


Whose  systems  run  17  of  the  20 
largest  stock  exchanges,  worldwide? 

It’s  the  same  folks  who  enable 
over  60%  of  the  world’s  interbank 
transactions.  Compaq.  With 
systems  and  support  services  that 
allow  hundreds  of  millions  of 
dollars  to  flow  safely  all  over  the 
world,  every  second  of  every  day. 
It’s  the  ultimate  in 
mission-critical, 
fault-tolerant 
NonStop®  computing 
The  kind  we  provide,  not  just  for 


Who  outruns  everyone  under  the  sun 
(including  Sun)? 

Compaq’s  lead  in  high-perfor¬ 
mance  64-bit  UNIX®  computing  is 
huge,  and  growing.  For  example,  we 
set  an  all-time  TPC-C  record  running 
Oracle8"  on  clustered  AlphaServer® 
systems.  What  does  this  mean  in  real 
life,  you  ask?  It  means  that  we  can 
help  you  do  things  in  a  few  seconds 
that  used  to  take  you  days. 


Who  helps  millions  of  e-mail  users 
explain,  expound,  collaborate  and 
just  plain  talk? 

Compaq  systems  and 
support  people  help  run  many  of 
the  world’s  largest  e-mail  systems. 


CoBpaq  ? 

irlp  not  insf  for  M  M 


This  may  surprise  you. 

It’s  Compaq.  In  fact,  Compaq 
beat  out  the  biggest  names  A 
in  IT  integration  in 
InformationWeek’s  annual 
poll  of  IT  professionals, 
finishing  second  by  the  slimmest 
of  margins.  If  you  need  to  get 
the  most  out  of  your  IT 
investment,  we  don’t  just  have 
the  answer.  We  are  the  answer. 


the  financial  world,  but  for  all 
kinds  of  industries. 


i  Who  knows  SAP  R/3 
like  no  one  else  (except, 


We’re  also  the  number  one  integrator 
of  Microsoft  Exchange®  with  over 
400  global  customers.  If  you’ve  got 
a  large  project  ahead,  remember: 
We  can  be  a  big  help. 


Where  in  the  world 
do  you  do  business? 

No  matter: 
our  27,000  service 
professionals  call 
114  countries  home. 


of  course,  SAP)? 

We  have  over  5,000  R/3 
installations  under  our  belts — 
more  than  any  other  competitor. 
To  put  R/3’s  enormous  power 
to  work  in  your  business, 


Where  does  the  enterprise  store  its 
gigabytes,  terabytes  and  googolbytes? 

Once  again,  we’re  the  answer. 
Compaq  StorageWorks®  delivers  the 
widest  array  of  multi-user  storage 
products  in  the  business.  And  they’re 
designed  to  solve  storage  problems 
for  any  enterprise,  no  matter  which 
hardware  and  software  you  already 


use:  ours,  theirs,  anyone’s. 


AltaVista -created  by  Compaq,  running  on  Compaq  AlphaServer 
systems- handles  1  billion  Internet  searches  per  month,  j 


When  telephone  companies  all  over 
the  world  dial  911,  who  picks  up? 

Did  you  know  that  ail  of  the 
top  30  telcos  depend  on  Compaq 
for  everything  from  fault-tolerant 
NonStop  computing  to  compre¬ 
hensive  disaster  relief? 

So  do  more  than  170  other 
telecommunications  companies 
If  your  company  could  use  that 
kind  of  reliable,  bulletproof 
computing,  why  not  give  us  a  call? 


Who 


knew? 


All  of  the  world’s  top  10  aerospace  companies  fly  with 
Compaq.  (There’s  no  better  launch  platform  for  technical 
computing  than  Compaq  64-bit  UNIX.) 


Ever  buy  stock  online? 

Or  bank  in  your  pajamas? 

Three  quarters  of  the  top  ISPs 
choose  Compaq  to  keep 
millions  of  subscribers  connected. 

Four  out  of  the  five  most  popular 
Web  sites  are  powered  by  Compaq. 
Microsoft  chose  us  to  implement 
and  manage  the  infrastructure  for 
MSN.com: 

And  AltaVista^, 
the  most  powerful 
and  useful  guide  to 
the  Internet?  We  Evenavhtmlslorlfronl 

j  j .  •  .  •  needs  a  rock-solid 

Q°n  t  )USt  tun  It.  foundation.  So  thousands  of 
,v,  .  ,  .  e-businesses,  large  and  small,  tap 

We  invented  It.  Compaq  for  systems,  solutions,  support. 


In  other  words,  as  enterprise 
computing  moves  onto  the  Internet, 
it’s  also  moving  onto  Compaq. 


Want  to  know  more? 

More  details?  More  case 
histories?  More  references? 
Better  answers  to  the  toughest 
IT  challenges  there  are? 

You’ll  find  them  at 
www.compaq.com/betteranswers . 

Or  call  us  at 
1-800-AT-COMPAQ. 


COMPAQ. 

Better  answers. 

www.compaq.com/betteranswers 


Mission-critical  NonStop  enterprise 
systems  for  more  financial  exchanges,  more  ATM  networks 
and  more  of  the  world’s  top-tier  banks  than  any  other  company. 


*(102541tpmC  @  $139.49/tpmC-Available  September  15.  1998)  ©1999  Compaq  Computer  Corp  Better  answers  is  a  service  mark  of  Compaq.  AlphaServer.  NonStop.  AltaVista  and  StorageWorks  are  registered  trademarks  of  Compaq. 
Microsoft  Exchange  is  a  registered  trademark  and  MSN.com  is  a  trademark  of  Microsoft  Corporation.  All  other  names  are  trademarks  or  registered  trademarks  of  their  respective  companies. 


Now  more  than  ever,  you  need  the 
most  advanced  and  powerful  network 
management  software  you  can  find. 
That's  why  so  many  network  managers 
today  are  switching  to  Network/7™  Pro. 

Because  it  gives  you  total  control — exactly 
what  you  need  to  deliver  the  quality  of  service 
your  users  have  all  been  demanding. 

Not  only  can  you  identify  the  impact  net¬ 
work  problems  have  on  your  business,  you  can 
resolve  them  before  users  are  ever  affected. 
Network/TPro  optimizes  performance,  provides 
enhanced  manageability,  and  dramatically 
reduces  downtime. 

It  also  provides  substantially  more  func¬ 
tionality  than  any  other  network  management 
solution.  Whether  it’s  ATM,  Frame  Relay  or 
Switch,  TCP/IP  or  IPX,  DECNet  or  SNA, 
Network/TPro  gives  you  a  consistent  way 
to  manage  your  entire  network,  across  any 
platform,  protocol,  or  network  operating  system. 


Network/7- Pro  views  your  entire  network  from  a  business 
perspective. 


And  with  its  centralized, 
policy-based  approach, 
aligning  network  management 
to  business  objectives  has 
finally  become  a  reality. 

Best  of  all,  Network/T 
Pro  is  part  of  CA’s  family 
of  acclaimed  management 
products  built  on  a  common 


framework.  So,  as  your  role  evolves  to  encompass  other  enterprise  require¬ 
ments,  you  can  incrementally  implement  additional 

solutions  in  an  integrated  fashion.  Just  what 
you  would  expect  from  the  industry  leader  in 
network  and  systems  management. 

To  change  your  network  management 
point  of  view,  visit  our  website  at 
www.cai.com/ads/networkitpro  or 
call  1-877-2  GO  FOR  IT. 


( Computer ® 
Associates 

Software  superior  by  design. 


©1999  Computer  Associates  International.  Inc.,  Islandia,  NY  11788-7000.  All  product  names  referenced  herein  are  trademarks  ot  their  respective  companies.  All  information  herein  is  based  on  publicly  available  information  asol  9/15/98. 

Free  Product  info  enter  NWInfoXpress  #10  online  @  www.networkworld.com/infoxpress 


Ask 


Dr  Intranet 


B  y  Steve 
Blass 

Is  there  some 
way  to  recover  a 
lost  or  forgotten 
password  on  our 
intranet's  Windows 
NT  Web  server?  I 
don't  want  to  re¬ 
build  the  system  from  scratch. 

Via  the  Internet 

You  might  be  able  to  recover 
the  password  using  LOpht  Crack 
from  www.10pht.com.  LOpht 
Crack  conducts  attacks  on  the 
Security  Account  Manager 
(SAM)  database  and  may  get 
you  back  into  the  system. 

Another  approach  is  to  re¬ 
place  the  password.  A  tool  for 
this  is  available  at  www.nmrc. 
org/files/snt/bootdisk.bin.  Down¬ 
load  this  file,  and  write  the 
image  to  a  floppy  disk  using  the 
rawrfte.exe  program  available 
at  http://metalab.unc.edu/pub/ 
Linux/system/install/rawwrite/ 
rawrite3.zip.  Boot  the  floppy 
on  your  NT  server.  It  will  load 
Linux,  mount  the  NT  File  System 
(NTFS)  partition  and  present  an 
NT  password-changing  utility 
you  can  use  to  change  the 
password  on  any  account  with¬ 
out  knowing  the  password. 

At  start-up,  you  will  be  asked 
the  locations  of  your  NTFS  parti¬ 
tion  and  SAM  database  file  and 
if  you  want  to  load  the  SCSI  dri¬ 
vers.  The  NTFS  partition  is  listed 
as  type  OS/2  HPFS.  Then  you 
will  be  given  a  list  of  accounts. 
Type  in  the  name  of  the  one  to 
change  and  the  new  password. 
Upon  rebooting  NT,  you  may 
need  to  log  on  as  "administra¬ 
tor"  with  a  lowercase  "a"  until 
you  reset  the  password  again 
under  NT.  Caveat  emptor:  Be 
very  careful  with  these  tools. 

As  a  network  architect  at 
Sprint  Paranet  in  Houston, 

Blass  understands  the  strain  of 
developing  and  managing 
intranets.  Send  your  problems 
to  dr.intranet@paranet.com. 


Technology"1* 

_  Evolving  Technologies 

and  Standards 

Cable  modems  deliver  fast  'Net  access 


HOW  IT  WORKS 

Data  Over  Cable  Service  Interface  Specification  (DOCSIS) 

DOCSIS  defines  a  broad  standard  for  cable  modem  systems.  The  specification 
identifies  everything  from  broadcast  modulation  technique  and  transmission 
equipment  to  the  protocol  for  exchanging  bidirectional  signals. 

)  ms  TV 

O  CMTS  translates  incoming  data  packets  into  radio  frequencies 
that  are  then  combined  with  TV  signals  on  the  combiner. 
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O  Combined  traffic  is  sent  to 
the  end  user  at  40M  bit/sec. 
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©  Broadcast  traffic  is  split  off  at  end-user  site  by  splitter  and  sent  to  the  TV  set. 
The  cable  modem  converts  remaining  radio  frequencies  into  Ethernet  packets 
and  sends  them  to  the  LAN. 


BY  PAUL  NIKOLICH 

Cable  operators  today  are 
deploying  cable  modem 
technology  that  lets  sub¬ 
scribers  access  the  Internet 
over  the  same  wires  that  deliver  televi¬ 
sion  signals  at  speeds  100  times  faster 
than  standard  V90  telephone  modem 
technology  —  and  without  waiting  for  a 
dial-up  connection. 

In  1996,  several  cable  operators  com¬ 
missioned  the  development  of  the  Data 
Over  Cable  Service  Interface  Specification 
(DOCSIS)  with  the  objective  of  establish¬ 
ing  a  single  specification  for  equipment. 
DOCSIS  covers  all  operational  elements 
used  in  delivering  data  service  to  end 
users,  including  service  provisioning, 
security,  data  interfaces  and  radio  fre¬ 
quency  interfaces  (RET).  RFIs  are  the  keys 
to  cable  equipment  interoperability. 

The  architecture  of  the  DOCSIS  RFI 
consists  of  three  major  components:  the 
Cable  Modem  Termination  System 
(CMTS),  installed  in  the  head  end,  or 
main  facility,  of  the  cable  operator;  the 
hybrid  fiber  coaxial  (HFC)  cable  network 
wiring  infrastructure;  and  the  cable 
modem,  installed  at  customer  premises. 

In  order  for  cable  operators  to  deploy 
two-way  data  services,  they  must  first 
upgrade  their  wiring  infrastructure 
from  one-way  to  two-way.  Cable  opera¬ 
tors  also  install  fiber  optic  cables  from 
the  head  end  to  a  fiber  distribution 
node.  These  nodes  distribute  the  signals 
to  500  to  2,000  homes,  depending  on 
configuration. 

By  using  fiber  optic  cabling  in  the 
trunk  section  of  a  cable  network,  cable 
operators  can  reduce  the  number  of 
amplifiers  needed  to  complete  a  circuit 
between  the  head  end  and  the  end  user, 
thus  greatly  increasing  reliability  and  sig¬ 
nal  quality. 

Cable  modems  are  used  to  connect 
high-speed  data  pipes  terminated  in  the 
cable  operator’s  head  end  to  the  HFC 
infrastructure. The  data  connection  is  an 
IEEE  802.3-compliant  10M  or  100M  bit/ 
sec  Ethernet  port  on  a  router.  The  router 
can  be  connected  to  the  Internet  via  a 
high-speed  (T-l  or  faster)  WAN  interface. 

Cable  modems  translate  Ethernet 
packets  into  radio  frequency  signals  that 
are  mapped  into  an  unused  6-MHz  tele¬ 
vision  channel  slot  and  broadcast  to  all 
the  homes  by  the  HFC  node.  The  signal 
is  received  by  any  cable  modems  on  the 
local  LAN  segment.  It  can  travel  any¬ 
where  in  the  downstream  cable  spec¬ 


trum,  from  91  MHz  to  857  MHz. 

The  downstream  throughput  of  the 
cable  modem  can  be  27M  bit/sec  or  40M 
bit/sec,  depending  on  the  quality  of  the 
HFC  channel  from  the  head  end  to  the 
subscriber  units. 

The  cable  modem  at  the  cable  opera¬ 
tor’s  facility  receives  signals  from  all  the 
downstream  cable  modems  on  a  different 
set  of  upstream  frequencies  in  the  5-MHz 
to  42-MHz  band.  The  throughput  of  this 
channel  is  variable,  based  on  the  quality 
of  the  upstream  channel.  Throughput 
varies  from  160K  bit/sec  to  10M  bit/sec. 
The  DOCSIS  architecture  provides  for 
one  downstream  channel  to  send  signals 
to  all  cable  modems,  which  may  broad¬ 
cast  return  signals  on  several  different, 
nonoverlapping  frequencies. 

This  allows  the  total  throughput  of  the 
return  channel  to  be  increased  by  the 
number  of  independent  return  channels 
used.  For  example,  the  total  maximum 
return  channel  bandwidth  for  four  10M 
bit/sec  independent  upstream  channels 
would  be  40M  bit/sec. 

The  cable  modem  translates  the 
downstream  radio  frequencies  into 
packets,  determines  if  the  packets  are 
destined  for  that  particular  cable 
modem  and  sends  the  packets  along  to  a 
computer  or  a  LAN  on  the  client  side  of 
the  cable  modem. 

This  network  connection  is  currently 
specified  to  be  10/100M  bit/sec  Ether¬ 
net,  but  alternative  interfaces,  such  as 
Universal  Serial  Bus  and  PCI,  are  being 


considered  for  lower-cost  applications. 
The  cable  modem  also  receives  packets 
from  clients  on  the  LAN  and  translates 
packets  onto  the  upstream  frequency  to 
which  they  have  been  assigned. 

A  cable  modem  and  its  media  access 
control  protocol  use  contention  mode 
and  time-division  multiplexing  (TDM) 
mode. The  cable  modem  allocates  a  cer¬ 
tain  portion  of  time  for  contention  mode 
or  TDM  mode,  depending  on  how  the 
cable  operator  configures  the  network. 
Contention  mode  works  well  under  a 
light  load,  providing  low  delay  and  high 
throughput  when  needed.  TDM  mode 
works  well  under  a  heavy  load  or  in 
cases  in  which  guaranteed  throughput  is 
desirable.  The  drawback  of  TDM  is  that 
the  peak  throughput  is  limited  to  the 
amount  of  bandwidth  allocated  to  the 
cable  modem. 

In  addition  to  the  original  DOCSIS 
specification,  conventionally  known  as 
DOCSIS  1.0,  upgraded  versions  of  the 
specification  are  under  development. 
These  add  features  such  as  quality-of-ser- 
vice  capabilities,  which  will  enable  the 
deployment  of  packet  telephony  across 
the  cable  infrastructure. 

Nikolich  is  vice  president  of  technol¬ 
ogy  and  standards  at  Broadband 
Access  Systems,  a  Marlborough,  Mass., 
developer  of  cable  access  platforms.  He 
also  is  vice  chairman  of  the  IEEE  802 
LAN/MAN  Standards  committee.  He 
can  be  reached  at p.nikolich@ieee.org. 
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Gearhead  —  inside  the  network  machine  .  Mark  Gibbs 

Your  logo  is  no  good  if  no  one  can  see  it 


This  week’s  question  is:  “Can  I 
see  your  logo?”  If  you’ve  been 
involved  with  the  World  Wide  Web, 
you'll  have  heard  the  term  “browser- 
safe  palette.” 

While  you  might  have  “grokked” 
the  phrase  —  that  is,  understood  it  at 
a  basic  techie  “I  get  the  idea”  level  — 
you  may  not  have  had  the  time  to 
find  out  what  it  really  means. 
Gearhead  is  here  to  correct  that. 

A  key  objective  in  building  your 
Web  site  is  to  display  your  organ¬ 
ization,  to  show  the  world  what 
you  do  and  convey  the  value  of 
your  business.  Central  to  that  is 
looking  good,  and  for  your  Web  site 
to  have  that  professional  look  it 
must  be  polished.  This  is  where  the 
browser-safe  palette  comes  in  — 
using  it  ensures  that  graphics  look 
right. 

The  problem  is  that  color  rendi¬ 
tion  on  PCs  is  a  horrible,  ugly  com¬ 
promise.  At  the  top  end  of  the  pro¬ 
fessional  computer  display  systems 
are  “true  color”  displays  that  support 
a  palette  of  16,777,216  colors. 
Below  that  are  what  the  majority  of 
users  actually  have. 

It  turns  out  that  the  lowest  com¬ 


mon  denominator  for  IBM  PCs  and 
Macintoshes  is  a  256-color  palette. 
Even  more  restrictively,  both  operat¬ 
ing  systems  reserve  40  of  those  col¬ 
ors  for  system  purposes,  leaving  you 
with  216  colors  to  work  with. 

Now,  the  audience  for  your  Web 
site  might  be  using  computer  sys¬ 
tems  capable  of  rendering  a  gazillion 
colors.  But  for  the  rest  of  us  that  is 
unlikely  to  be  the  case.  This  means 
any  images  in  our  Web  pages  should 
use  a  palette  that  will  work  on  dif¬ 
ferent  platforms  if  we  want  to  have  a 
consistent  look. 

This  common  palette  is  the 
browser-safe  palette.  If  you  use  col¬ 
ors  that  aren’t  in  this  palette  and 
your  image  is  viewed  on  a  256-color 
monitor,  the  image  must  be  modi¬ 


fied.  This  is  done  either  by  you,  so 
that  you  get  the  look  you  want,  or 
dynamically  by  the  browser.  In  the 
latter  case,  the  results  can  be 
acceptable,  but  don’t  bet  on  it. 

When  the  browser  is  left  to  its 
own  devices,  it  makes  a  best  effort 
to  fix  images.  When  it  cannot  render 
a  color  exactly,  the  browser  converts 
to  an  approximation. 

Now,  say  you  have  a  corporate 
logo  in  which  many  close  shades  of 
green  are  adjacent.  If  none  of  the 
shades  match  a  color  that  can  be 
displayed,  they  will  all  be  mapped  to 
what  will  probably  look,  at  least  to  a 
human,  like  the  same  color. 

The  result:  a  lake  of  a  single  color, 
completely  wiping  out  the  subtle¬ 
ties  of  the  logo. 

All  major  browsers  use  a  palette 
based  loosely  on  a  scheme  first 
developed  by  Netscape  called  the 
color  cube.  This  model  places  the 
three  colors  —  red,  green  and  blue 
—  on  the  edges  of  a  cube  and 
divides  the  range  of  each  color  into 
six  equally  spaced  values. The  six  val¬ 
ues  break  the  cube  into  6x6x6  sub¬ 
cubes  that  define  a  total  of  (sur¬ 
prise)  216  colors. 


If  you  use  an  image  in  a  Web  page 
that  has  colors  that  are  not  in  that 
palette,  you  force  the  browser  to 
fake  the  color  by  dithering,  a  tech¬ 
nique  that  uses  groups  of  pixels  of 
two  close  colors  to  approximate  the 
target  color.  It  works  reasonably  well 
for  photographic  images  but  can 
yield  ugly  results  with  line  art,  such 
as  logos. 

All  professional  graphics  editors 
have  the  ability  to  select  and  modify 
the  palettes  of  images,  and  most 
now  support  the  browser-safe 
palette.  Check  out  Photoshop 
(www.adobe.com/prodindex/photo 
shop/)  and  Debabilizerwww.equi 
librium,  com/). 

If  you  are  going  to  fine-tune  the 
graphics  on  your  site,  I  recommend 
the  following  books:  Creating  Killer 
Web  Sites,  Second  Edition,  by  David 
Siegel,  1997,  Hayden  Books;  ISBN: 
1568304331;  and  Coloring  Web 
Graphics. 2,  by  Lynda  Weinman, 
Bruce  Heavin  and  Ali  Karp,  1997, 
New  Riders  Publishing;  ISBN: 
1562058185. 

Visibility  reports  to  gearhead® 
gibbs.com. 


Dan 

WorldCom’s 
broadband  applications  and 
architect  of  the  company’s 
Internet  metropolitan-area 
exchanges  (MAE).  So  he  has 
some  interesting  things  to 
say  about  the  state  of  the 
Internet. 

Read  our  front-page  fea¬ 
ture  on  a  day  in  the  life  of 
the  Internet,  then  come 
online  this  week  to  ex¬ 
change  ideas  with  Lasater  in 


our  forum: 

DocFinder:  1 743 

Revive  your  career 

The  doctor  is  in.  Twice  a 
month,  our  very  own  career 
doctor,  Shaun  Kelly,  will  be 
online  to  field  questions 
about  jump-starting  your 
career,  from  how  to  ask  for  a 
raise  to  determining  your  net 
worth  as  an  employee. 

Kelly,  a  vice  president  at 
EDP  Staffing,  holds  office 
hours  this  week  in  our  online 


career  forum.  You  can  post 
questions  publicly  or  send 
him  a  private  note,  but  no 
appointment  is  necessary 
(sorry,  he  doesn’t  make 
house  calls): 

DocFinder:  1731 

Tool  of  the  week 

Looking  to  hang  a  shingle 
on  the  Internet  and  start  sell¬ 
ing  some  products? 

Intershop  3  Developer 
Edition  helps  developers 
build  Internet  storefronts, 
complete  with  shopping  cart 
capabilities. 

The  tool  uses  its  own  tem¬ 
plate  language  extension 
variables  to  complement 
HTML,  allowing  dynamic  data 
elements  on  standard  Web 
pages  to  handle  such  features 
as  shopping  carts,  inventory- 
level  fluctuations  and  new 
product  information. 

Intershop  3  supports 
server-side  scripting  and 
multimedia  page  elements. 
Any  HTML  authoring  tool 


can  be  used  in  conjunction 
with  the  environment. 

Intershop  3  is  available  for 
Windows  NT  4.0  (Service 
Pack  3  required),  Sun  Solaris 
2.5  or  greater,  SGI  Irix  6.2  or 
greater,  IBM  AIX  4.2,  HP-UX 
10.10  or  greater,  and  DEC 
Unix  4.0d.  Download  an  eval¬ 
uation  at: 

DocFinder:  1736 

Stuff  you  need  to  know 

OK,  OK,  we  should  be  star¬ 
ing  hard  at  the  monitor,  fin¬ 
gers  tapping  keys  at  a  light¬ 
ning  pace  as  we  produce 
unparalleled  amounts  of 
high-quality  output  that  will 
help  the  company  bring  in 
record  profits  this  year. 

But  sometimes  (just  some¬ 
times),  those  same  fingers 
wander  a  little,  and  we  get 
caught  up  in  stuff  we  proba¬ 
bly  shouldn’t. 

Take,  for  example,  Hamp- 
ster  Dance.  The  site,  at 
www.hampsterdance.com, 
consists  mainly  of  one  page 


with  300  animated  GIFs  of  lit¬ 
tle  dancing  hamsters. 

Yes,  it’s  as  dumb  as  it 
sounds  (even  more  so  if  you 
turn  your  sound  card  up  to 
hear  the  music  guiding  their 
dances).  And  yet,  you  sit  there, 
mesmerized,  watching  them 
dance  over  and  over  again. 

We  hear  it’s  been  banned 
from  the  offices  of  at  least 
one  government  contractor. 

Then  there’s  Stick  Figure 
Death  Theater.  Oops,  here 
comes  the  boss! 

What  are  your  favorite 
time-wasters?  Let’s  build  a  list 
(and  damn  the  torpedoes!): 

DocFinder:  1737 

Building  a  bookshelf 

A  new  network  administra¬ 
tor  is  looking  for  advice  on 
books  and  Web  sites  to  help 
him  come  up  to  speed  on 
overall  network  issues. 

What  would  you  recom¬ 
mend?  Plus,  see  what  other 
folks  have  suggested: 

DocFinder:  1642 
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Overview 


♦TOWN  *  Hear  first-hand 

X/CETIXTO  recommendations  from 
IVIcjD  1  1JN  vJ  John  Gallant,  editor  in 
■r* chief  of  Network  World, 

and  Jim  Herman,  vice 
president  of  Northeast  Consulting  Resources, 
Inc.,  on  how  to  alleviate  your  network 
management  blues,  understand  the  latest 
technologies  and  find  solutions  that  work  in  your 
environment.  They  know  you’re  still  wrestling 
with  the  challenges  of  network  management 
systems,  such  as  cost  of  ownership,  complexity 
of  use  and  implementations  of  real  solutions. 
And  they,  along  with  leading  network 
management  vendors,  are  prepared  to  offer  you 
some  real  solutions  that  will  have  you  playing  a 
new  tune  entirely. 


This  unique  FREE  seminar  is  a  must  if  you 

want  to: 

★  Get  practical  pointers  on  creating  a  plan  for 
enterprise  network  management  that 
delivers  results 

★  Learn  how  to  lower  the  cost  of  operations 
and  support  through  improved  enterprise 
network  management 

★  Understand  the  latest  directions  in  systems 
and  service  management  to  accommodate 
future  change 

★  Find  out  how  Web  technology  can  deliver 
effective  integration  of  management  tools 
and  databases 

★  Develop  a  prioritized  list  of  improvements 
you  can  apply  immediately  to  your 
management  infrastructure 
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1999  Seminar  Tour 

Boston  February  23  •  New  York  February  24  •  Atlanta  March  9  •  Philadelphia  March  10 
San  Francisco  March  23  •  Los  Angeles  March  24  •  Dallas  March  29  •  Chicago  March  30 

PRESENTING  SPONSORS 

n  CONCORD  Ad© 

The  Total  View " 

INTERNATIONAL  NETWORK  SERVICES 
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Moderators 

John  Gallant,  Network  World 

Jim  Herman,  Northeast  Consulting 
Resources ,  Inc. 

Join  industry  experts  John  Gallant,  editor  in 
chief  of  Network  World,  and  Jim  Herman,  vice 
president  of  Northeast  Consulting  Resources, 
Inc.,  along  with  a  panel  of  representatives  from 
the  leading  enterprise  management  solution 
provider  companies  for  this  unique,  interactive 
event.  They  will  help  you  understand  how  to 
best  meet  your  daily  challenges  and  implement 
successful  enterprise  network  management  in 
a  practical  and  effective  way. 


Registration  is  FREE!  Call  today. 


www.nwfusion.com/townmeeting 


NetScout. 
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If  you  are  interested  in  sponsorship  opportunities,  please  contact  Andrea  D’Amato  at  (508)  820-7520  or  3dainato@nww.com 
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Editorial  Insights 

The  ATM  Forum: 
Friend  or  foe? 

I  want  to  applaud  the  ATM  Forum,  hut  I 
just  can’t. 

For  years  it  has  been  fighting  the 
good  fight  to  establish  ATM  as  the 
technology  of  choice  for  multiservice 
networks.  During  that  time,  detractors 

have  complained  that  the 
group  s  work  was  flawed 
or  politically-driven  by 
vendor  members  with 
their  own  agendas.  Nay¬ 
sayers  said  the  group  com¬ 
plicated  ATM  by  coming 
out  with  so  many  specifi¬ 
cations  and  directives  that 
vendors  and  users  had  no 
idea  what  to  implement. 

But  the  forum  stuck  by 
its  guns  and  reined  itself 
in  by  announcing  the  Anchorage  Accord 
in  1996,  which  set  a  baseline  for  future 
ATM  technology  development. 

Now  the  group  has  astutely  embraced  IP 
George  Dobrowski,  president  of  the  ATM 
Forum,  recently  said  the  forum  is  helping 
to  define  a  range  of  technologies  to  help  IP 
and  ATM  better  work  together.  One  of  the 
biggest  things  the  forum  is  doing  is  work¬ 
ing  with  the  Internet  Engineering  Task 
Force  to  ensure  that  developing  IP  stan¬ 
dards  will  work  well  with  ATM  standards. 

This  all  sounds  well  and  good,  but  the 
group  lives  in  la-la  land. 

Its  meetings  are  still  closed-door  —  if 
you’re  not  a  member,  you  won’t  hear  about 
the  activities  at  ATM  Forum  meetings  until 
weeks  after,  if  at  all.  And  the  group’s  market¬ 
ing  arm  seems  nonexistent  at  a  time  when 
it  should  be  at  its  most  active. 

The  press  is  barred  from  going  any¬ 
where  near  most  meeting  sites.  And  even 
when  we  are  invited  to  special  press 
events  at  such  meetings,  as  we  were 
recently  in  Atlanta,  reporters  are  kept  well 
away  from  actual  sessions.  Lord  knows 
what  we  might  do  if  we  were  actually 
allowed  to  attend.  Would  work  stop  and 
the  world  come  to  an  end? 

Gut  check,  folks:The  forum  invited 
some  40  journalists  to  the  Atlanta  event, 
and  three  showed  up. 

Perception  or  circumstantial  evidence 
can  be  a  powerful  force  (ask  Bill  Clinton). 
The  perception  about  the  Forum  is  that  it 
is  still  a  closed  membership  doing  some 
sort  of  secret  work  that  few  people  care 
about. The  Forum  needs  to  change  that 
perception. 

—  Michael  Cooney 
mcooney@nivw.  com 
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Private  lives 

In  his  “Backspin”  column  about  Intel’s  serial¬ 
ized  processor  chips  (“Jump  on  the  serialized 
bandwagon,”  Feb.  l,page  58),  Mark  Gibbs 
says,  in  essence,  “Never  fear,  lots  of  other 
computers,  such  as  mainframes  and  minis, 
already  have  readable  serial  numbers.  It’s  no 
big  deal,  really!”  However,  mainframes  and 
minis  aren’t  personal  devices.  Lots  of  people 
use  shared  servers,  so  information  collected  about 
those  servers  doesn’t  shed  light  on  the  behavior 
of  an  individual.  But  once  programmers  get  their 
hands  on  the  unique  serial  numbers  branded  into 
our  personal  desktops,  those  serial  numbers  will 
begin  appearing  in  all  sorts  of  databases,  letting 
people  collect  and  exchange  profiles  about  per¬ 
sonal  computing  habits. 

Gibbs  says  a  serialized  CPU  is  no  more  dangerous 
than  the  Ethernet  address  on  a  PC.  But  the  Ethernet 
address  is  alterable  on  many  network  interface 
cards,  and  in  most  organizations  Ethernet  cards  hop 
from  machine  to  machine  like  fleas  on  dogs.  No¬ 
body  uses  the  Ethernet  address  as  a  tracking  ID 
because  it’s  not  reliable.  Intel  says  its  CPU  serial 
number  is  immutable,  which  is  just  what  the 
snoopy  people  are  lusting  for. 

I  don’t  think  the  Electronic  Privacy  Information 
Center  is  being  at  all  premature  in  calling  for  a 
boycott  of  Intel  products.  If  we  don’t  stop  Intel 
from  serializing  CPUs,  we  can  all  kiss  our  desktop 
privacy  goodbye. 

Mel  Beckman 
Ventura,  Calif. 

Mark  Gibbs  claims  we  have  a  long  way  to  go  before 
processor  serial  numbers  become  like  Social  Secur¬ 
ity  numbers.  But  that  seems  to  be  how  Intel  is  ad¬ 
vertising  processor  serialization.  To  me  it  sounds 
like  Intel  is  planning  to  broadcast  these  serial  num¬ 
bers  every  time  you  visit  a  Web  site. That  makes 
processor  serialization  more  powerful  and  more 
dangerous  than  my  network  interface  card  (NIC) 
address  or  TCP/IP  address.  And  if  my  NIC  address  is 
unique,  what  do  I  need  a  processor  serial  number 
for,  anyway? 


Has  Intel  announced  any  productive  use 
for  this  serial  number?  The  only  uses  I  have 
heard  about  so  far  are  Web  tracking  and  copy¬ 
right  protection.  Are  there  any  uses  that  actu¬ 
ally  benefit  the  user? 

Security  is  almost  a  moot  point.  It’s  just 
another  number  that  would  be  added  to  an 
encryption  scheme.  And  if  Intel  lets  Web  sites 
capture  the  number,  how  is  that  any  more  secure 
than  what  we  already  have? 

Sounds  to  me  like  Intel  doesn’t  yet  know  what 
it  wants  to  do  with  this  thing.  All  I  know  is  if  it 
has  no  clearly  defined  purpose  or  value  to  the  end 
user,  I  don’t  want  it. 

Chuck  Noyes 
Boston 

The  new  Novell 

Your  article  “Novell  Reborn”  (Feb.  8,  page  1)  was  an 
excellent  piece  of  industry  journalism:  well  re¬ 
searched  and  comprehensive.  It’s  great  to  see 
Novell  getting  positive  front-page  press  on  Novell 
Directory  Services  and  its  rebounding  market  share. 
I  hope  more  and  more  people  come  to  realize  that 
what  Microsoft  does  best  is  marketing  and  not  soft¬ 
ware  development. 

Neil  Conner 
Network  manager 
Mineral  Resources  Development 
San  Mateo,  Calif. 

Just  wanted  to  compliment  you  on  the  thorough¬ 
ness  of  your  article  on  the  rebirth  of  Novell;  it 
was  definitely  well-written  and  informative. 
Believe  it  or  not,  there  are  still  a  lot  of  shops  out 
there  that  are  using  multiple  platforms  and  some¬ 
how  managing  them  all  with  limited  staff.  Any¬ 
thing  positive  on  Novell  is  more  ammunition  I 
can  use  to  convince  management  to  stick  with 
our  current  Novell  servers  and  upgrade  rather 
than  migrate  to  NT. 

I  prefer  the  user-friendly  Novell  Directory 
Services  structure;  however,  I  haven’t  been  given 
the  opportunity  to  try  Novell  NetWare  for  NT  on 
an  existing  NT  server. 

Chandra  Griffin 
Harrisonburg,  Va. 


Send  letters  to  nwnews@nww.com  or  John 
Gallant ,  editor  in  chief.  Network  World, 
161  Worcester  Road,  Framingham,  MA 
01701.  Please  include  phone  number  and 
address  for  verification. 
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Bottom  Line  .  Joel  Snyder 


Breaking  up  with  your  ISP  need  not  be  hard  to  do 


Bad  business  is  popular  in  the  Internet  world. 
Even  the  largest  companies  are  not  immune. 
Case  in  point:  USWest.net,  the  ISP  owned  by 
US  WEST,  offers  a  dedicated  128K  bit/sec 
ISDN  line  with  static  IP  addresses  for  $80 
per  month.  But  USWest.net  has  to  buy  the 
ISDN  service  from  US  WEST  for  $  1 1 2  per  month  in 
addition  to  the  cost  of  equipment,  billing  and  sup¬ 
port  people.  So  it’s  losing  money  on  every  line. 
Perhaps  the  ISP  hopes  to  make  up  for  the  money 
loss  in  volume. 

This  kind  of  fiscal  foolishness  doesn’t  even  make 
people  blink  in  the  Internet  business.  After  all,  you 
have  to  lose  money  to  make  money  —  or  at  least  to 
have  your  stock  price  skyrocket. 

Stock  prices  are  a  powerful  force.  I  sit  on  the  board 
of  directors  of  a  small  ISP  that  was  recently  targeted 
for  acquisition.  The  acquiring  company’s  business 
plan  was:  Buy  a  lot  of  small  ISPs;  sit  around,  trying  not 
to  lose  money;  and  get  bought  by  AT&T,  MCI,  Sprint 
or  America  Online.  With  this  strategy,  everyone  makes 
money  because  the  stock  goes  through  the  roof. 


Well,  this  is  the  U.S.,  and  that’s  certainly  one  way 
to  make  money.  But  one  component  of  the  equation 
was  never  mentioned:  the  customer. 

When  an  ISP  gets  bought  or  goes  broke,  cus¬ 
tomers  almost  always  suffer.  Sure,  there  are  rare 
cases  in  which  the  ISP  was  so  destitute  that  getting 
bought  was  the  only  way  out  of  Chapter  1 1  and 
things  do  get  better.  But  that’s  the  exception,  not 
the  rule. 

What  can  you  do  to  ensure  that  you  don’t  end  up 
with  an  ISP  that’s  about  to  get  bought  or  drop  out? 
Unfortunately,  not  much.  ISPs  are  acquisition  targets, 
and  many  of  those  that  don’t  smell  the  lure  of  easy 
money  will  turn  up  in  bankruptcy  court.  However, 
you  can  build  your  connection  so  you  can  move  to 
another  ISP  without  unduly  upsetting  your  users. 
Here  are  some  hints: 

•  Avoid  dedicated  circuits,  such  asT-ls.  Look  for  a 
connection  that  goes  over  a  public  network,  such  as 
frame  relay  or  ISDN.  Adding  a  new  permanent  virtual 
circuit  to  a  frame  relay  circuit  can  be  done  in  a  day; 
replacing  a  dedicated  T-l  can  take  a  month  or  more. 


•  Write  an  escape  clause  into  your  contract.  Sign 
up  for  five  years  to  get  a  nice  price  break,  but 
include  a  clause  that  lets  you  get  out  if  you  (and 
you  alone)  find  that  service  or  support  is  below  an 
acceptable  level. 

•  Gain  IP  address  independence.  Use  technolo¬ 
gies  such  as  Domain  Name  System,  Dynamic  Host 
Configuration  Protocol  and  even  Network  Address 
Translation  to  ensure  that  it  doesn’t  matter  what 
your  IP  addresses  really  are.  If  you  think  that  re¬ 
addressing  would  require,  at  most,  a  painful  Satur¬ 
day,  you’ve  done  a  good  job.  If  renumbering  your 
system  is  too  painful  to  consider,  your  ISP  may 
have  you  in  a  hammerlock.  And  if  you’re  big  and 
wealthy,  you  can  get  IP  addresses  that  don’t  belong 
to  any  ISP  —  and  that’s  the  best  situation. 

Snyder  is  a  senior  partner  at  Opus  One ,  whose 
dial-up  account  got  sold  by  Sprynet  to  Compu¬ 
Serve  to  AOL  to  Mindspring,  at  which  point  it  was 
time  to  get  a  new  ISP.  He  can  be  reached  at 
jms@opusl.com. 


Web  speech  .  David  Strom 

Make  sure  your  corporate  Web  site  is  lawsuit- proof 


Managing  your  corporation’s  Web  site  has 
gotten  more  complicated,  thanks  to  a 
recent  lawsuit  front  Planned  Parenthood. 
Last  month,  a  U.S.  district  court  in  Oregon 
ruled  that  a  Web  site  run  by  an  anti¬ 
abortion  group  can’t  list  the  names  of  doc¬ 
tors  who  perform  abortions.  These  lists  included 
the  following  legend:  "black  font  =  working;  grayed- 
out  name  =  wounded;  and  strikethrough  =  fatality.” 
(For  example,  the  name  of  Dr.  Barnett  Slepian,  mur¬ 
dered  last  year  in  his  home  outside  of  Buffalo,  N.Y., 
had  a  strike  through  it.)  In  addition,  the  antiabor¬ 
tion  group  has  been  ordered  to  pay  Planned 
Parenthood  millions  of  dollars  in  damages. 

The  First  Amendment  to  the  Constitution  guar¬ 
antees  freedom  of  speech.  In  the  past,  threats  to 
individuals  have  been  excluded  from  this  protec¬ 
tion,  rightly  so  in  my  opinion.  No  one  should  be 
allowed  to  shout  “fire”  in  a  crowded  theater.  But 
we  get  into  trouble  when  we  try  to  extend  this 
analogy  to  the  World  Wide  Web. 

The  Oregon  ruling  indicates  that  naming  an 
individual  on  a  hate  site  constitutes  a  threat,  and 
others  seem  to  agree.  Pennsylvania  Attorney 
General  Mike  Fisher  has  said,  “Free  speech  does 
not  give  you  the  right  to  threaten  to  kill  someone, 
whether  it  be  through  the  mail,  in  person  or  on 
the  Internet.”  Fisher  has  his  own  lawsuit,  still  unde¬ 
cided  at  this  writing,  against  another  hate  group 
publishing  threats  on  the  Web. 

Both  the  Oregon  and  Pennsylvania  cases  spell 
trouble  for  corporate  Webmasters.  Here’s  why. 

Most  corporations  have  more  than  one  individ¬ 
ual  posting  information  to  their  Web  site.  Few  have 


any  formal  policy  to  educate  these  Internet  authors 
as  to  what  is  and  isn’t  appropriate  information  to 
distribute.  And  it’s  getting  stickier  to  determine 
what  is  and  isn’t  appropriate. 

For  example,  several  years  ago  a  Webmaster  was 
fired  because  he  included  at  the  bottom  of  the  cor¬ 
porate  Web  page  a  link  to  his  personal  site. The 
entire  link  consisted  of  a  single  period  at  the  end 
of  a  sentence  —  you  had  to  look  really  hard  to  find 
the  tiny  blue  line  underneath  that  period. 

But  by  and  large,  the  vast  majority  of  corporate 
Web  sites  are  thankfully  far  from  the  Sturm  und 
Drang  of  most  hate  sites.  Your  corporation  probably 
doesn’t  incite  people  to  take  the  law  into  their  own 
hands,  call  for  anyone  to  be  brought  to  justice  or 
post  the  home  addresses  of  people  it  considers  bad 
guys. That’s  great,  but  you  need  to  take  further  steps 
if  you  want  to  avoid  nasty  legal  battles  down  the 
road.  Here  are  some  suggestions. 

•  Remind  your  Web  staff  that  anything  they  post 


can  and  will  be  held  against  your  company 
legally.  So  make  sure  anyone  who  is  allowed 
to  post  information  to  your  site  understands 
what’s  harmful  and  what’s  not.  I  am  not  say¬ 
ing  that  every  line  of  HTML  needs  a  legal 
review,  but  just  a  few  common-sense  policies 
should  help. 

•  Have  an  explicit  policy  stating  what  type 
of  information  is  and  isn’t  permitted  on  your 
site.  Make  sure  you  are  clear  about  how  per¬ 
sonal  information  can  be  displayed  and  what 
external  sites  you  intend  to  link  to. 

•  Establish  and  maintain  a  regular  sched¬ 
ule  for  updating  pages  to  make  it  easier  for 

management  to  review  the  changes. 

•  Ensure  you  have  tight  control  over  who  is 
allowed  to  update  your  site. 

When  I  first  heard  about  the  Oregon  ruling,  I 
was  initially  elated  to  see  those  responsible  pun¬ 
ished  for  distributing  hate  speech.  My  elation 
turned  into  concern  the  more  I  thought  about  this 
case.  As  much  as  I  detest  hate  sites,  I  think  this  rul¬ 
ing  has  dire  implications  down  the  road  for  corpo¬ 
rate  Webmasters,  even  if  content  is  considered 
quite  bland.  It  increases  the  chances  that  someone 
will  sue  you  over  information  on  your  Web  site, 
and  that  is  nasty  business  indeed. 

Strom  is  the  founding  editor  in  chief  of  Net¬ 
work  Computing  and  co-author  of  the  book 
Internet  Messaging  (Prentice  Hall,  1998),  and  pub¬ 
lishes  his  Web  Informant  essays  at  www.strom. 
com.  He  can  be  reached  at  (516)  944-3407  or 
david@strom.  com. 
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IP  your  IT  Management  solution  fails, 
which  thank-you  gift  will  the  boss  be  sending  you? 


The  word  is  out  Far  too  many  enterprise 
management  projects  don't  deliver.  So,  what's 
the  hang  up?  Recent  industry  analyst  studies 
reveal  that  most  major  framework 
implementations  take  too  much  time  and 
don't  deliver  ROI.  After  years  of  work,  only 
a  small  portion  of  purchased  functionality  is 
actually  implemented.  There  is  a  better  way. 

HP  OpenView  delivers  measurable,  proven 
results  quickly  and  completely.  Anew 
independent  head-to-head  lab  test*  revealed 
“HP  delivers  on  the  promise  of  integrated 
tools  to  solve  specific  problems...  Unlike 

PLATINUM f,  CA  and  Tivoli,  HP  has  not 

■ 

overloaded  its  solution  with  a  common 

' 

Framework...  HP’s  generally  flawless  solution 
sets  the  mark  against  which  to  measure  all 
other  out-of-the-box  functionality”. 

The  OpenView  approach  is  different  from 
the  "leap  of  faith"  framework  approach. 

Target  your  most  pressing  problem  and 
solve  it  today. 

HP  OpenView.  Reach  your  management 

. 

goals  without  getting  hung  in  the  process. 

, 

' 


HP  OpenView 


Learn  why  OpenView  has  so  many  satisfied  customers: 

http://www.openview.hp.com 
or  call  1  *800*785*3925 


Attend  the  OpenView  Forum  &  Universe  Conference 

APRIL  12.-16,  1999  HYNES  CONVENTION  CENTER.  BOSTON,  MASSACHUSETTS. 

VISIT  OUR  WEB  SITE  AT  www.openview99.com 


Works 


Right 


Now 


'Source:  Network  Computing,  Syracuse  University  Real-World  Labs'®,  1999. 
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A  DAY  IN  THE  LIFE 
OF  THE  INTERNET 


Continued  from  page  1 

On  Tuesday,  Jan.  19,  Network  World,  in 
conjunction  with  parent  company 
International  Data  Group’s  News  Service, 
dispatched  reporters  to  eight  of  the  major 
crossroads  for  Internet  traffic,  known  as 
network  access  points  (NAP).The  idea  was 
to  gain  an  inside  look  at  the  people  and 
places  at  the  core  of  the  Internet  backbone. 

Consistent  with  the  highly  decentral¬ 
ized  nature  of  the  Internet,  we  found  that 
in  many  respects  the  NAPs  are  very  differ¬ 
ent.  Some  are  located  on  college  campus¬ 
es,  others  are  in  corporate  high-rises. 

Some  NAPs  are  run  by  nonprofit  organiza¬ 
tions  that  offer  their  services  for  free, 
while  others  are  run  by  major  telcos  that 
charge  thousands  of  dollars  per  month  in  connection 
fees.  Some  have  staffers  on-site  24  hours  a  day;  others 
are  managed  remotely.  Some  use  FDDI  for  their  back¬ 
bones;  others  rely  on  Gigabit  Ethernet  or  ATM. 

But  there  are  similarities  among  NAPs  as  well. They 
all  serve  the  same  basic  function  —  to  act  as  neutral 
byte  bazaars  where  ISPs  can  swap  packets  with  other 
ISPs  based  on  specific  protocols  and  traffic  levels.  NAPs 


don’t  get  involved  in  the  haggling  that 
leads  to  the  public  peering  agreements 
between  ISPs;  they  simply  move  traffic. 

Security  is  tight  at  all  the  NAPs,  befitting 
their  importance.The  guts  of  all  the  NAPs 
look  remarkably  alike  no  matter  where 
they  are  —  drab  rooms  crammed  with 
jumbles  of  cables  and  tall  racks  of  routers 
and  switches.And  the  network  managers 
who  operate  the  NAPs  share  a  quiet  confi¬ 
dence  that  they  have  the  bandwidth,  the 
backup  systems  and  the  network  monitor¬ 
ing  tools  to  weather  any  storm  and  keep 
the  Internet  humming. 

The  day  dawns  in  Tokyo 

As  the  Shintamagawa  line  pulls  out 
from  a  train  station  near  Yokohama, 
Yasushi  Sano  finds  a  seat.  It’s  7:30  a.m.,  and  the  engi¬ 
neer  settles  in  to  sleep  for  the  hour-and-a-half  ride 
to  work. 

Sano,  who  heads  the  technical  staff  at  Japan  Internet 
Exchange  Co.  (JPIX),  is  first  to  arrive  at  the  office.  He’s 
followed  closely  by  Marketing  ChiefToshiki  Ueda  and 
the  nine  others  who  oversee  Japan’s  only  NAP. 

Created  in  1997,  JPEX  is  a  cooperative  effort  funded 


SFINX  handles  70%  of 
the  Internet  traffic 
generated  in  France, 
and  Franck  Simon 
helps  ensure  it  gets 
through  without  a 
hitch. 


A  day  in  the  life  of  the  Internet 


Glimpse  inside  eight  network  access  points  (NAP) 
around  the  globe  that  serve  as  the  lifeblood  of  the 
Internet  and  shoulder  the  weight  of  all  that  traffic. 

The  Internet  is  one  unruly  beast,  with  hundreds  of 
providers  connecting  to  each  other  in  various  ways. 
But  NAPs  bring  a  measure  of  calm  and  stability, 
offering  secure,  reliable  connections  among  ISPs. 
Although  the  eight  NAPs  we  visited  around  the  globe 
differ  in  terms  of  look,  feel  and  size,  the  people 
behind  the  NAPs  share  a  quiet  confidence  that  they 
have  what  it  takes  to  keep  the  Internet  humming. 


by  top  Japanese  ISPs  and  equipment  companies, 
including  AT&T,  Fujitsu,  NEC  and  Kokusai  Denshin 
Denwa  Co.  (KDD),  Japan’s  largest  international  telco. 

JPIX  is  located  in  the  KDD  building  in  Otemachi,  the 
Tokyo  district  that  is  the  heart  of  Japan’s  financial 
world.  It’s  Tuesday,  and  JPIX  has  a  weekly  company 
meeting  at  10  a.m.As  staffers  sip  cold  tea,  Sano  outlines 
a  schedule  for  readying  JPfX’s  systems  for  2000. 

After  the  meeting,  Sano  and  Ueda  return  to  their 
cramped  workstations.They  monitor  switch  activity 
from  browsers  on  their  desktops.  A  chart  displays  the 
traffic  volume  of  NEC’s  BigGlobe  Internet  service, 
while  blinking  dots  representing  router  ports  show 
JPlX’s  activity  in  real  time. 

The  19th  floor  office  has  a  view  of  downtown  Tokyo 
that  stretches  all  the  way  to  Tokyo  Bay.  On  a  clear  day, 
Ueda  sometimes  scans  the  horizon  with  binoculars  kept 
on  the  windowsill.  But  today  the  sky  is  overcast.  Sano 
and  Ueda  have  a  quiet  lunch  at  their  desks,  the  mood  of 


Service  for  French  Internet  Exchange  (SFINX) 


The  NAPs  at  a  glance 


Chicago  NAP 

Location;  Ameritech  building,  Chicago 

ISPs  connected:  60 
Core  technology;  ATM 
Connection  cost:  Starts  at  $4,500 
Jan.  19  traffic  peak:  1.8G  bit/sec 


London  Internet  Exchange  (LINX) 

Location:  Telehouse,  a  secure  telecom  and  ISP  site 

ISPs  connected:  50 

Core  technology:  Gigabit  Ethernet 

Connection  cost:  About  $1 6,350  to  join  plus  $1 9,600  per  year 

Jan.  19  traffic  peak:  400M  bit/sec. 


Amsterdam  Internet  Exchange  (AMS-IX) 

Location:  SARA,  a  national  computing  center 

ISPs  connected:  52 
Core  technology:  Ethernet 

Connection  cost:  About  $560  to  $950  per  month  depending  on  speed 

Jan.  19  traffic  peak:  1 61 M  bit/sec 


MAE-West 

Location:  MCI  WorldCom  building, 
San  Jose 

ISPs  connected:  75 
Core  technology:  FDDI/ATM 
Connection  cost:  Not  available 
Jan.  19  traffic  peak:  1.9G  bit/sec 


Location:  MCI  WorldCom  building, 
Vienna,  Va. 

ISPs  connected:  77 
Core  technology:  FDDI/ATM 
Connection  cost:  Not  available 
Jan.  19  traffic  peak:  2.1  G  bit/sec 


_ 


Japan  Internet  Exchange  Co.,  Ltd.  (JPIX) 

_ :  Kokusai  Denshin  Denwa  (Japan's  largest 

internation  telco)  office  building,  Tokyo 

ISPs  connected:  20 
Core  technology:  FDDI 
Connection  cost:  $10,000  per  month 
peak:  320M  bit/sec 


Location:  France  Telecom  building,  Paris 

ISPs  connected:  36 
Core  technology:  Ethernet 
Connection  cost:  About  $7,000  per  year  for  hosted 
connection,  $14,500  for  managed 

Jan.  19  traffic  peak:  Not  available 


Hong  Kong  Internet  Exchange  (HKIX) 
Location:  Chinese  University  of  Hong  Kong 

ISPs  connected:  50 
Core  technology:  Ethernet 
Connection  cost:  None 
Jan.  19  traffic  peak:  60M  bit/sec 
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utter  calm  a  testament  to  the  stability  of  the  JPIX  sys¬ 
tem.  In  fact,  Sano  carries  a  pager  so  he  can  be  reached 
on  weekends  and  evenings,  but  he  says  he  has  never 
been  called  in  for  a  crisis. 

JPIX  traffic  peaks  at  320M  bit/sec  every  day  around 
midnight,  w  hen  users  are  home  from  work  and  access 
rates  are  the  least  expensive.  The  second  peak  arrives 
between  noon  and  1  p.m.,  when  workers  surf  the  ’Net 
during  their  lunch  breaks. 

“You  can  see  how  dedicated  the  Japanese  are  to 
their  jobs,”  Ueda  says,  pointing  to  a  graph  that  shows 
traffic  plummeting  after  1  p.m.  “They  quit  playing  on 
the  j  World  Wide]  Web  and  get  back  to  work,”  he  says 
with  a  laugh. 

At  the  core  of  the  exchange  are  four  FDDI-based 


Compaq  Gigaswitches.The  switches,  which  each  have 
a  capacity  of  3.4G  bit/sec,  sit  next  to  banks  of  wiring 
closets  that  hold  cabling  panels  and  Cisco  Catalyst 
5000  Ethernet  switches  that  support  connections 
among  20  ISPs. 

Sano  heads  home  around  6:30  p.m.  His  cohorts  in 
Hong  Kong,  which  is  just  an  hour  behind  Tokyo,  will 
soon  be  doing  the  same. At  just  about  that  time,  net¬ 
work  managers  at  key  European  NAPs  are  arriving  at 
their  offices. 

It's  academic  in  Hong  Kong 

If  the  Japanese  NAP  is  urban  and  corporate,  the  Hong 
Kong  Internet  Exchange  (HKIX)  is  just  the  opposite  — 
rural  and  academic.  Since  1995,  it  has  been  run  by  the 
Computer  Services  Center  of  the  Chinese  University  of 
Hong  Kong,  located  in  Shatin  in  the  New  Territories. 

Like  other  NAPs  outside  the  U.S.,  HKIX’s  goal  is  to 
keep  local  traffic  local.  If  HKIX  didn’t  exist,  the  50  par¬ 
ticipating  ISPs,  including  AT&T,  China  Telecom  and 
UUNET,  would  have  to  bounce  intra-Hong  Kong  traffic 
to  a  NAP  in  the  U.S.,  which  would  be  cumbersome 
and  costly. 

HKIX  offers  its  services  free,  but  it  may  soon  be 
forced  to  begin  assessing  fees  following  recent  cuts  in 
the  university’s  budget.  However,  the  scene  at  HKIX  is 
highly  professional  —  more  like  an  end-user  company 
than  an  academic  establishment. 

A  large,  sparsely  furnished,  well-lit  room  in  the  uni¬ 
versity’s  computer  center  contains  the  exchange’s 
switch  and  routers,  which  are  housed  in  glass-fronted, 
cream-colored  cabinets. The  core  of  the  exchange’s 
system  is  a  Cisco  Catalyst  55(X)  switch  and  a  Cisco 
7507  router. To  join  the  exchange,  ISPs  are  required  to 


lease  at  minimum  a  dedicated  T-l  line  and  set  up  a 
router  at  the  university. 

HKIX  has  grown  quite  a  bit  over  the  past  few  years, 
says  Che-Hoo  Cheng,  who  heads  the  NAP  When  HKIX 
was  first  established,  a  coaxial  cable  was  used  to  inter¬ 
connect  the  routers.  Over  time,  the  exchange  graduat¬ 
ed  to  an  unshielded  twisted-pair  hub,  then  a  Cisco 
Catalyst  3000  switch,  a  5000  and  now  a  5500.The 
router  was  upgraded  from  a  Cisco  2501  to  a  7507. 

HKIX’s  two  engineers, Walter  Lee  andY.L.Yeng, 
spend  most  of  their  time  on  the  university’s  network 
but  squeeze  in  a  few  hours  each  week  to  ensure  the 
NAP  is  running  smoothly.  “We  just  monitor  our  switch, 
it’s  a  very  minimal  workload, ”Yeng  says.  In  addition, 
three  shifts  of  network  operators  provide  round-the- 
clock  coverage  at  the  NAP  monitoring  traffic 
and  responding  to  customer  calls. 

Typical  of  the  way  NAPs  fit  into  the  Internet 
architecture,  HKIX  doesn’t  send  traffic  to,  or 
even  engage  in  regular  communications  with, 
any  other  NAP  However,  HKIX  does  stay  in 
close  contact  with  the  island’s  participating 
ISPs,  sending  them  the  latest  router  perfor¬ 
mance  data. 

HKIX  is  one  of  the  smaller  NAPs,  with  traffic 
peaking  at  about  60M  bit/sec  around  midnight, 
far  below  network  capacity  of  3.6G  bit/sec. 

Lee  andYeng  agree  that  the  Internet  is  quite 
stable.  “The  whole  Internet  is  not  the  responsi¬ 
bility  of  one  party,  it’s  the  result  of  cooperation 
between  different  parties,”Yeng  says.  Even  if  the 
Hong  Kong  NAP  failed,  the  island’s  larger  ISPs 
have  their  own  direct  connections  to  major  U.S. 
NAPs,  so  traffic  could  easily  be  rerouted. 

Amsterdam  is  up  and  coming 

Around  the  time  JPIX’s  Sano  is  heading 
home  on  the  train  from  Tokyo,  a  blustery  win¬ 
ter  day  is  dawning  in  Amsterdam.  Peter  Huiser, 
who  watches  over  the  Amsterdam  Internet 
Exchange  (AMS-IX),  glides  along  raised  dikes  on  his 
heavy  black  bicycle.  Locking  up  his  transport 
at  the  doors  of  SARA,  a  national  computing 
center  serving  several  Dutch  universities,  he 
files  into  a  low  brick  building  for  the  day’s  first 
cup  of  black  coffee. 

Huiser  and  his  team  of  network  engineers 
have  a  busy  day  ahead,  monitoring  traffic  for 
the  52  ISPs  connected  to  AMS-LX,  the  only 
Internet  exchange  in  the  Netherlands,  and 
managing  SARA’s  academic  and  private  nets. 

AMS-IX  is  not  much  more  than  two  rooms 
full  of  gray  cabinets  that  house  the  routers  of 
member  ISPs.Today,  the  Cisco  Catalyst  5000 
switch  that  lies  at  the  core  of  AMS-IX  will 
process  traffic  at  an  average  of  182M  bit/sec. 

While  traffic  tripled  on  AMS-EX  last  year,  the  net¬ 
work  is  nowhere  near  capacity,  says  Huiser,  aca¬ 
demic  computing  services  manager  at  SARA. 

Currently,  it  runs  at  about  10%  capacity  during  peak 
times,  which  correspond  to  European  business  hours 
and  a  two-hour  stretch  in  the  evenings. 

The  way  AMS-EX  is  set  up,  ISPs  connect  their  routers 
via  10M  or  100M  bit/sec  Ethernet  links  to  one  of  the 
two  Cisco  Catalyst  5000  switches,  which,  in  turn,  are 
connected  by  a  primary  Gigabit  Ethernet  link  and  a 
backup  Fast  Ethernet  link.  One  switch  lives  in  a  cabi¬ 
net  at  SARA,  the  other  across  the  road  at  NIKHEF, 
operator  of  a  national  physics  research  network. 

As  an  association, AMS-EX  has  only  been  in  exis¬ 
tence  for  one  year,  but  it  has  been  an  exchange  of 
sorts  since  1992,  when  three  ISPs  were  connected 
with  a  thick  yellow  Ethernet  cable  at  the  science 
park  where  SARA  and  NIKHEF  are  located. Today,  the 


ISPs  include  @Home  Benelux,  Planet  Online, AT&T, 
Demon  Internet  and  EUNet. 

SARA  network  engineers  are  on  duty  from  8  a.m.  to 
8  p.m.  to  handle  calls  from  ISP  members. After  8  p.m., 
the  burden  of  support  falls  on  the  person  unlucky 
enough  to  be  on  beeper  duty. 

But  with  AMS-EX’s  track  record  of  nearly  100% 
uptime,  there  aren’t  many  ISPs  that  call  with  problems, 
Huiser  says.The  only  crash  occurred  last  year  when  a 
power  grid  failed  in  the  early  morning  hours.The 
exchange  was  back  in  action  three  hours  later  and  no 
ISP  had  complained,  probably  because  most  customers 
were  still  asleep. 

Paris,  home  of  the  SFINX 

How’s  this  for  tight  security?  Everyone  who  enters 
the  French  NAP,  located  in  a  France  Telecom  building 
on  rue  de  la  Banque  in  the  heart  of  Paris,  has  to  hand 
over  his  passport  to  a  security  guard  who  sits  behind  a 
thick  pane  of  glass. 

In  France,  the  NAP,  which  is  called  Service  for 
French  Internet  Exchange  (SFINX),  is  run  by  a  state 
agency  that  subcontracts  the  day-to-day  operations  to 
France  Telecom. 

SFINX,  which  carries  70%  of  the  Internet  traffic  gen¬ 
erated  in  France,  is  located  on  two  floors  in  the  France 
Telecom  building.  Managed  clients  are  on  the  seventh 
floor,  where  no  one  but  France  Telecom  personnel  are 
allowed.  Hosted  customers  —  who  install,  configure 
and  maintain  their  own  equipment  —  have  access  to 
the  ground  floor  of  the  building. 

Hosted  ISPs  have  a  choice  of  a  10M  or  100M  bit/sec 
Ethernet  link,  while  managed  clients  get  a  10M  bit/sec 
connection  to  the  NAPA11  hosted  ISPs  monitor  their 
own  traffic,  but  Renater,  the  state  telecommunications 
agency  that  runs  SFINX,  also  monitors  everyone’s  traf¬ 
fic  using  home-grown  quality-control  applications,  says 
Franck  Simon,  SFINX  operating  director. 

The  exchange  is  monitored  in  two  shifts:  7:30  a.m. 
to  7  p.m.  and  7  p.m.  to  7:30  a.m.The  busier  daytime 
shaft  is  manned  by  a  minimum  of  two  engineers.  But 


Its  Ethernet  in  Amsterdam 


At  the  Amsterdam  Internet  Exchange,  ISPs  can  connect  to  their 
choice  of  two  Cisco  Catalyst  5000  Ethernet  switches,  which 
are  located  in  buildings  across  the  street  from  each  other. 
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similar  to  the  other  NAPs,  the  mood  is  relaxed.Things 
run  well  enough  that  there  is  little  to  do  on  SFINX’s 
behalf,  one  casually  dressed  technician  says,  other  than 
keep  an  eye  on  the  routers’  green  lights  and  on  the 
SFINX  customers  who  come  from  time  to  time  to 
maintain  their  equipment. 

And  like  the  other  NAPs,  growth  has  been  startling. 
When  Renater  started  SFINX  in  1994,  it  had  one  switch 
and  three  managed  customers.A  second  switch  was 
added  in  1996,  and  the  third  Cisco  switch  came  in 
1997. Today,  36  ISPs  connect  to  SFINX;  Renater  declines 
to  give  the  network’s  capacity  other  than  to  say  it  could 
accommodate  as  many  as  60  ISPs. 

For  now,  the  equipment  in  place  is  sufficient  to  han¬ 
dle  all  of  SFINX’s  needs.  But  with  an  eye  to  the  future, 


Andy  Schmidt  says  Ameritech  s  NAP  may  soon  provide  direct  Inter¬ 
net  access  for  large  corporations,  enabling  them  to  bypass  ISPs. 
"We're  starting  to  cross  the  threshold  where  a  different  business 
model  makes  sense,"  he  says. 
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Jan.  19  was  a  fairly  quiet  day  at  MAE-West.  As  Dan  Lasater  put  it,  "You  don't  see 
anybody  running  around  with  their  hair  on  fire." 


Renater  plans  to  launch  SFINX  2  later  this  year. 

Renater  Director  Dany  Vandromme  has  no  doubt 
that  SFINX  will  keep  up  with  customer  demand.  He 
isn’t  so  sure,  however,  that  his  smaller  customers  will 
survive. ‘‘Big  operators  peer  with  one  another,  but 
some  won’t  even  talk  to  the  small  operators. Within  a 
few  years,  there  may  be  nothing  but  big  operators 
left,”  he  warns. 

Lonely  in  London 

Getting  past  the  three  layers  of  security  at  Tele¬ 
house,  where  London’s  Internet  Exchange  (LINX)  is 
housed,  is  a  challenge  akin  to  breaking  into  James 
Bond’s  M.1. 6  headquarters. 

A  history  here  of  terrorism,  flooding  and  the  fear  of 
power  outages  and  natural  emergencies  led  to  the  cre¬ 
ation  of  a  state-of-the-art  secured  building  that  houses 
a  number  of  telcos  and  ISPs.The  several  layers  of  rein¬ 
forced  glass  security  doors  that  require  pass  cards  and 
pass  codes  to  enter  testify  to  the  significance  of  what 
is  housed  within. 

For  here,  along  with  a  presence  by  all  major  Euro¬ 
pean  and  U.S.  telcos,  are  found  the  switches  and 
routers  through  which  more  than  90%  of  all  domestic 
U.K.  Internet  traffic  passes. 

Today  the  only  human  around  is  engineer  Jerry 
Reilly,  whose  makeshift,  fold-out  desk,  holding  a  tiny 
laptop,  protrudes  from  one  of  the  racks.  He  is  here 
only  at  a  reporter’s  request.  Normally,  he  would  be  at 
LINX’s  office  in  Peterborough,  about  a  90-minute  drive 
from  London,  because  almost  any  problem  can  be 
solved  remotely. 

Indeed.no  one  works  on-site.  Rather,  three  engineers, 
who  split  a  24-hour  shift,  are  notified  via  their  mobile 
phones  if  a  problem  arises;  they  rush  over  or,  more  like¬ 
ly,  solve  the  problem  remotely.  If  the  engineers  can’t  be 
reached,  a  Telehouse  staff  engineer  can  fill  in. 

The  LINX  suite  in  Telehouse  is  only  about  1 5  square 
meters,  and  every  bit  of  it,  except  for  aisle  space,  is 
stuffed  with  racks  holding  switches  and  other  equip¬ 
ment. The  core  of  the  exchange  is  a  Packet  Engines 
5200  Gigabit  routing  switch. This  behemoth  can  more 
than  handle  the  traffic  that  comes  through  the  NAP, 
says  Keith  Mitchell,  executive  chairman  of  LINX. 
Providing  backup  for  the  5200  are  two  Plaintree 
Systems  WaveSwitch  4800  switches  and  two  Cisco 
5000  switches.The  system  accommodates  70  ports, 
and  there  are  currently  50  ISPs  connected  to  LINX. 

This  configuration  can  easily  accommodate  even 
the  busiest  time,  which  is  typically  around  2  p.m., 
when  the  traffic  load  reaches  around  400M  bit/sec. 
The  traffic  load  is  about  the  same  every  weekday, 
lighter  on  weekends. 


In  fact,  LINX  has  never  gone 
down.  There  were  two  minor 
incidents  caused  by  a  Telehouse 
employee  who  accidentally 
switched  off  the  power  supply, 
but  Mitchell  says  no  one  com¬ 
pletely  lost  service. 

A  global  gateway  in  Vienna,  Va. 

With  a  technical  staff  consist¬ 
ing  of  two  ex-G.I.s  and  a  former 
state  cop,  MAE-East  is  ready  for 
anything.  Can  it  handle  60%  of  all 
European  traffic?  Bring  it  on. 
How  about  40%  of  all  U.S.  traffic? 
Is  that  all  you’ve  got? 

“We’ve  got  plenty  of  band¬ 
width,  and  we’re  ready  to  go,” 
says  former  Army  engineer  Mike 
Carroll,  lead  technician  for  MAE- 
East,  the  NAP  operated  by  MCI 
WorldCom  in  a  glass-fronted  office  building  outside 
of  Washington,  D.C. 

The  name  MAE,  or  Metropolitan  Area  Ethernet,  dates 
back  to  1992  when  MFS  Communications  built  the  first 
NAP  for  ISPs.  MCI  WorldCom,  which  bought  MFS,  now 
operates  eight  MAEs  in  the  U.S.  MAEs  East, West  and 
Central  are  considered  Tier  1 ,  or  national,  NAPs,  while 
the  other  five  are  Tier  2,  or  regional,  NAPs. 

While  the  NAPs  in  France  and  Japan  are  designed  to 
keep  traffic  from  traveling  outside  of  their  borders, 
MAEs  East  and  West  serve  as  major  gateways  for  inter¬ 
national  traffic. 

In  the  U.S. .where  traffic  is  far  heavier  than  in  other 
countries,  a  large  ISP  typically  peers  with  other  large 
ISPs  at  multiple  NAPs  across  the  country. This  provides 
a  better  way  to  manage  traffic  and  offers  insurance  in 
case  of  an  outage.  It’s  also  somewhat  of  a  necessity 
because  NAPs  owned  by  competing  companies  don’t 
share  traffic,  and  MCI  WorldCom  doesn’t  allow  ISPs  to 
piggyback  traffic  from  one  NAP  to  another.  For  exam¬ 
ple,  if  an  ISP  wants  to  peer  with  other  ISPs  at  MAE-East 
and  MAE-West,  the  ISP  has  to  establish  a  separate  con¬ 
nection  at  each  location. 

Carroll,  technician  Steve  Sherfey,  who  also  served  in 
the  Army,  and  Dave  Vacher,  who  spent  10  years  as  a 
state  trooper  before  making  the  career  switch  to  net¬ 
working,  are  sitting  pretty  these  days  when  it  comes  to 
bandwidth. 

With  its  FDDI  network  maxing  out,  MCI  WorldCom 
installed  three  Cisco  StrataCom  BPXATM  switches  each 
at  MAE-East  and  MAE-West. The  company  is  running 
concurrent  networks,  as  it  attempts  to 
migrate  existing  customers  over  to 
ATM  and  to  lure  new  customers  to  the 
service. 

MAE-East  consists  of  a  series  of  three 
highly  secure  rooms.  “It’s  a  lot  of  boxes 
and  a  little  bit  of  hum,”  says  Ken 
Mitchell,  who  oversees  the  operation. 

In  the  transmission  room,  behind  a 
glass  wall,  tangles  of  cable  aggregate 
traffic  from  customers,  such  as  AT&T, 

Sprint,  Cable  and  Wireless  and  Qwest, 
into  a  single  OC-192  (10.56G  bit/sec) 

SONET  connection  to  the  FDDI  and 
ATM  switches,  Mitchell  says. 

In  the  colocation  room,  80  cabinets 
painted  industrial  yellow  house  routers 
and  other  ISP  gear. The  third  room  hous¬ 
es  the  switches.The  ATM  boxes,  which 
are  trunked  together  by  OC-12  connec¬ 
tions,  pack  48  DS-3  ports  in  a  console 
the  size  of  a  dorm  refrigerator.  The  ATM 


switches  are  about  half  the  size  of  the  FDDI  switches, 
which  are  dwarfed  by  the  largest  appliance  in  the 
room,  a  giant  air  conditioner. 

Today,  traffic  at  MAE-East  peaked  at  2.1  G  bit/sec 
around  5  p.m. That’s  a  huge  amount  of  traffic,  consider¬ 
ing  that  the  Toky  o  NAP  peaks  at  320M  bit/sec  and  the 
London  NAP  typically  tops  out  at  400M  bit/sec. 

ATM  rules  in  Chicago 

The  quiet,  stark  surroundings  at  Ameritech’s  down¬ 
town  Chicago  NAP  belie  the  fact  that  this  is  one  of  the 
busiest  spots  on  the  Internet. The  NAP’s  three  Ascend 
ATM  switches  pump  out  6  terabytes  of  data  daily, 
which  is  double  the  traffic  load  from  early  1998. 

Despite  the  high  volume  of  traffic  moving  through 
the  NAP,  most  days  the  third-floor  operation  looks 
like  a  ghost  town,  with  rows  and  rows  of  switches 
and  SONET  multiplexers  humming  away,  most  dedi¬ 
cated  to  Ameritech’s  voice  network.  Aside  from  a 
clunky  metal  desk  and  a  couple  of  beat-up  chairs, 
there’s  no  sign  of  human  inhabitants. The  desktop  is 
barren,  the  walls  undecorated. 

That’s  because  similar  to  the  setup  in  London,  most 
of  the  circuits  are  provisioned  remotely  from  an 
Ameritech  data  center  in  Southfield,  Mich.,  and  the 
switches  are  monitored  at  the  company’s  network 
operations  center  (NOC)  in  Hoffman  Estates,  Ill. 

Even  though  it’s  not  his  home  base,  Operations 
Manager  Kevin  Peterson  can  usually'  be  found  at  the 
NAP  testing  circuits  —  but  only  during  normal  busi¬ 
ness  hours.  After  hours,  NOC  engineers  handle  NAP 
operations.  If  an  emergency  crops  up,  they  page 
Peterson  or  one  of  the  other  operations  managers. 

But  Peterson  can’t  recall  such  an  event.The  majority' 
of  the  ISPs,  international  research  organizations  and 
government  agencies  using  the  NAP  are  great  about 
upgrading  their  connections  and  engineering  their 
lines  to  avoid  congestion,  says  Andy  Schmidt,  product 
manager  for  Ameritech  s  NAP  service,  pulling  out  a 
printed  report  to  support  his  statement. 

To  further  prove  his  point,  Schmidt  heads  down  a 
row  of  switches  to  the  workstation  running  the 
Hewlett-Packard  Open  View  program  used  to  count  ATM 
cells  passing  through  the  exchange. A  quick  screen  scan 
shows  that  of  the  79  ATM  switch  ports,  only  two  are 
losing  any  cells  due  to  congestion. 

More  often  than  not,  any  congestion  that  occurs 
can  be  traced  to  an  ISP  sending  too  much  traffic  to 
another  ISP’s  router  rather  than  a  lack  of  bandwidth 
at  the  ATM  switch. 

ATM  s  scalability'  makes  it  easy  to  handle  the  con¬ 
stant  upgrades  in  the  number  of  ports  and  port  speeds 


In  Chicago,  its  ATM  at  the  core 


Large  ISPs  connect  their  backbones  to  Ameritech’s  Chicago  NAP  at 
speeds  up  to  the  OC-12  rate  of  622M  bit/sec.  An  Ascend  ATM  switch 
is  used  to  establish  a  full  mesh  of  PVCs  between  all  ISPs,  although 
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Software  building 
blocks  for  Web 
Self-Service  apps 


WebSphere  Application  Server  combines  a  Java  servlet 
runtime  environment  with  connectors  to  databases  and 
object  request  brokers.  So  you  can  bake  existing  business 
functions  right  into  your  site.  WebSphere  Studio  helps 
you  create  servlets  in  record  time. 

Lotus  Domino  Application  Server  lets  you  build 
collaborative  workflow  applications  for  rapidly 
changing  business  processes.  Domino  supports  secure, 
highly  interactive  Web  Self-Service  solutions. 

DB2'  Universal  Database  powers  some  of  the  Webs 
busiest  sites  because  it  can  support  a  world  of  users  with 
world-class  performance.  Fully  Java-enabled,  it  runs 
natively  on  all  leading  platforms. 

MQSeries”  helps  you  integrate  new  and  existing 
apps  into  your  Web  Self-Service  solution.  Now  fully 
Java-enabled,  MQSeries  is  the  worlds  leading  business 
integration  product  and  works  across  over  35  platforms. 


See  it  run  before  you  buy 

FREE  WEB  SELF-SERVICE  STARTER  PACK.  From 
product  demos  to  trial  code,  everything  you  need  to  start 
building  dynamic  sell-service  Web  apps  today  is  free  right 
now  at:  www.software.ibm.com/webselfserv. 


required  at  the  NAP  —  and  that  ability 
makes  up  for  the  heat  Ameritech  got 
four  to  five  years  ago  for  going  the  ATM 
route,  Schmidt  says. 

Most  of  Ameritech ’s  NAP  customers 
have  outgrown  their  original  DS-3 
connections  and  are  now  accessing 
the  exchange  at  the  OC-3  rate  of 
155M  bit/sec.  In  November,  the 
Chicago  NAP  became  the  first  to  offer 
access  at  the  SONET  rate  of  OC-12,  or 
622M  bit/sec. 

Schmidt  says  the  next  big  step  for 
the  Chicago  NAP  will  be  providing 
direct  Internet  access  to  large  corp¬ 
orations  that  decide  to  bypass  ISPs. 
“We’re  starting  to  cross  the  threshold 
where  a  different  business  model 
makes  sense.” 


Last  stop:  San  Jose 

One  of  the  first  things  you  notice 
about  MAE- West  is  the  view. 

MAE-West  stretches  out  comfortably 
on  the  10th  floor  of  a  building  in 
downtown  San  Jose,  with  large  windows 
opening  out  onto  a  cityscape  framed 
by  the  Santa  Cruz  mountains  in  the 
distance. 


More 

Online 

•  Use  our  interactive  map  to  get  more 
detailed  dispatches  from  the  eight 
NAPs  mentioned  in  this  story. 

•  Check  out  the  NAP  Web  sites  for 
traffic  statistics,  network  diagrams 
and  lists  of  ISPs  that  connect  to  each. 

•  Ask  Dan  Lasater, 

MCI  WorldCom's 
director  of  broad¬ 
band  applications 
and  architect  of  the 
company's  MAEs,  a 
question  about  the 

Internet  and  its  exchange  points. 
He'll  be  online  all  week,  responding 
to  your  questions. 


nwtusion 


The  large  lead-acid  battery  used  to 
provide  backup  power  to  the  MAE 
takes  up  a  corner  office  that  many 
executives  struggling  up  the  corporate 
ladder  would  kill  for. 

It  may  seem  strange  to  give  a  NAP 
such  prime  real  estate  —  but  this  is 
Silicon  Valley,  ground  zero  of  the  Inter¬ 
net  Revolution. 

At  its  heart,  MAE-West  consists  of 
three  ATM  switches,  six  FDDI  switches, 
a  handful  of  Ethernet  switches  and  a 
bank  of  cross-connects,  all  enclosed  in  a 


chain-link  cage.The  rest  of  the  room  is 
dominated  by  rows  of  black  metal  cabi¬ 
nets  that  look  like  they  could  be  Darth 
Vader’s  gym  lockers.The  cabinets  con¬ 
tain  routers  and  switches  colocated  by 
a  variety  of  ISPs.  More  colocated 
devices  are  on  the  1 1th  floor. 

Like  MAE-East,  MAE-West  runs  con¬ 
current  FDDI  and  ATM  networks.  At 
almost  2G  bit/sec  during  peak  hours  of 
10  a.m.  to  1  p.m.,  the  FDDI  portion  is 
running  at  near  capacity.About  75  ISPs 
connect  to  the  NAP  via  FDDI,  and  no 
more  are  being  added. 

New  customers  are  encouraged  to 
use  the  ATM  portion  of  the  NAP, 
installed  less  than  a  year  ago.  Each  of 
the  Cisco  StrataCom  BPX  switches  has 
9.6G  bit/sec  of  capacity,  which  has  only 
started  to  be  tapped  by  the  20  or  so  ISP 
connections.  MCI  WorldCom  chose 
ATM  for  its  upgrade  path  because  it’s 
more  mature  than  Gigabit  Ethernet  or 
packet  over  SONET,  says  Dan  Lasater, 
director  of  broadband  applications. 

Today,  there  doesn’t  seem  to  be  a  lot 
of  excitement  at  MAE-West,  which  is 
how  MCI  WorldCom  likes  it.“You  don’t 
see  anybody  running  around  with  their 
hair  on  fire,”  Lasater  grins. 

It’s  not  always  this  calm.The  most 
common  problem  is  an  individual  ISP 
suffering  an  outage.  In  that  case,  MCI 
WorldCom  will  help  trace  the  problem 
to  the  ISP’s  equipment  or  its  connection. 

The  worst  incident  occurred  when 
an  entire  FDDI  switch  failed,  Lasater 
recalls.Though  the  company  keeps 
spares  on  site,  it  took  a  few  hours  to  get 
things  back  to  normal. 

If  the  building’s  power  were  to  fail,  a 
generator  in  the  basement  would  kick 
in  after  about  a  minute.  As  an  added 
backup,  the  battery  in  that  comer 
office  would  provide  power  for  about 
four  hours.The  battery  is  so  large  and 
heavy  that  it  has  to  be  bolted  to  the 
building  frame. 

Even  with  all  the  backup  power,  how¬ 
ever,  Lasater  isn’t  satisfied.Today,  a  cou¬ 
ple  of  electricians  are  here  planning  the 
installation  of  yet  another  battery.The 
existing  battery  is  fine  for  now,  Lasater 
explains:“But  you  noticed  that  not  all 
the  [colocation]  cabinets  are  full.” 

It’s  midday  in  Northern  California, 
and  Lasater  is  watching  MAE-West  traf¬ 
fic  slowly  rise  to  a  1  p.m.  peak  of  1.9G 
bit/sec.  Meanwhile,  early  evening 
Internet  traffic  is  spiking  in  Europe,  and 
Sano  is  sitting  on  the  train  from  Yoko¬ 
hama  to  Tokyo  as  daylight  dawns  on 
another  day  in  the  life  of  the  Internet. 

This  story  was  reported  by  IDG 
News  Service  staffers  Clare  Haney  in 
Hong  Kong,  Rob  Guth  in  Tokyo, 
Jeanette  Borzo  in  Paris,  Kristi  Essick 
in  Amsterdam,  Jana  Sanchez  in 
London,  as  well  as  Network  World 
staffers  Beth  Schultz  in  Chicago,  Jeff 
Caruso  in  San  Jose  and  Neal 
Weinberg  in  Vienna,  Va.  The  story 
was  compiled  by  Weinberg. 
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With  an  IBM  Web  Self-Service  solution,  they'd  all  be  at  the  front  of  the  line  for  ticket 
purchases,  reservations,  seat  changes,  flight  availability  or  frequent  flyer  questions. 


e-business 


IBM,  DB2  and  MQSeries  are  registered  trademarks  and  WebSphere,  DB2  Universal  Database,  the  e-busmess  logo  and  Solutions  tor  a  small  planet  are  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Lotus  and  Domino  are  trademarks  ot  Lotus  Development 
Corporation  in  the  U  S.  and/or  other  countries.  Java  and  all  Java-based  trademarks  and  logos  are  trademarks  of  Sun  Microsystems,  Inc.  in  the  United  States  and/or  other  countries.  Other  company,  product  and  service  names  may  be  the  trademarks  or  service  marks  of  others.  ©1998  IBM  Coro.  All  fights  reserved 
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You’ve  got  a  Web  site.  So  why  are  they  still  standing  in  line? 

New  generation  IBM  Web  software  gets  sites  beyond  publishing,  improving  customers’  satisfaction  by  giving  them  tools 
to  serve  themselves  on  their  schedule,  while  increasing  profits  by  freeing  staff  from  routine  tasks.  Our  Web  Self-Service 
solutions  let  you  start  basic  and  add  functionality  as  you  go.  The  result:  highly  interactive  apps  that  link  to  core 
data  and  business  functions  -  and  move  you  to  the  front  of  the  line.  See  how  at  www.software.ibm.com/webselfserv. 


Solutions  for  a  small  planet " 


Cool  Tools 


Quick  takes  on  high-tech  toys 


Lee  Schlesinger,  Test  Center  director 

Phone  in  your  net 

Chances  are  you  have,  or  want  available  at  work  —  cabling.  If  you 
to  have,  a  network  at  home,  have  your  computers  in  a  single 
but  you  lack  one  of  the  amenities  room,  cabling  is  not  a  problem 


Internet  Commerce  Expo®,  at  Boston’s  World  Trade  Center,  is  the  world’s 
most  comprehensive  eBusiness  forum.  The  4-day  conference  and  3-day  expo  features  over  200  exhibitors  showcasing 
innovative  and  emerging  eBusiness  technologies.  In-depth  tutorials  and  an  extensive  conference  program  will  focus  on 
knowledge  management  and  eBusiness  solutions.  ICe  will  also  feature  keynote  addresses  by  Newt  Gingrich,  Speaker  of 
the  House  (1995-1998);  Nicholas  Negroponte,  Founder  and  Director  of  MIT’s  Media  Lab;  and  Tim  Berners-Lee, 
President,  W3  Consortium  and  Inventor  ofWWW.  Plus  numerous  special  events  designed  to  keep  you  up-to-date  on 
critical  trends  and  developments.  Register  now  at  www.iceexpo.com  or  800.667.4423. 
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(except  when  it’s  time  to  vacuum) 
because  you  can  string  the  comput¬ 
ers  together  with  10Base-2  cabling  or 
put  a  lOBase-T  minihub  on  your  desk. 
But  if  one  computer  is  in  your  office 
and  another  is  in  the  family  room,  you 
have  to  try  something  else. 

A  few  months  ago,  I  connected  my 
home  network  with  Intelogis’  Pass- 
Port  Plug-in  Network  (see  www.nwfu- 
sion.com,  DocFinder:  1746),  but  I  was 
disappointed  with  the  product’s  per¬ 
formance.  PassPort  uses  home  power 
lines  as  its  network  fabric. 

My  next  attempt  was  with  Action- 
Tec’s  ActionLink  Home  Networking 
Kit,  which  connects  over  internal  tele¬ 
phone  wiring. 

The  ActionLink  installation  kit 
comes  with  two  plug-and-play  PCI 
adapters.  My  clients  recognized  the 
adapters  and  installed  the  proper  dri¬ 
vers  perfectly.  After  setting  a  few 
TCP/IP  parameters  for  internal  net¬ 
work  addresses,  the  two  machines 
could  see  each  other. 

The  next  step  was  setting  up  one 
machine  as  a  proxy  server.  ActionTec 
bundles  software  called  DynaSyGate 
that  allows  you  to  do  this  in  a  fairly 
ingenious  way. 

You  can  set  up  two  PCs  with 
modems  and  use  either  to  make  the 
connection. 

DynaSyGate  had  one  huge  draw¬ 
back  for  me,  however.  It  requires  that 
you  connect  to  the  Internet  via 
Windows  Dial-up  Networking.  My 
Internet  link  is  through  a  cable 
modem,  which  is  always  on  in  the 
manner  of  an  Ethernet  connection. 
DynaSyGate  couldn’t  help  me. 

Luckily,  there  are  other  proxy  server 
applications  that  do  the  trick. 

I  installed  Ositis  Software’s  Win- 
Proxy  on  my  gateway  machine,  con¬ 
figured  a  client  to  work  through  the 
gateway,  and  there  I  was,  blithely 
browsing  the  Internet  at  1M  bit/sec. 
Well,  actually  slower  —  while  1M 
bit/sec  is  the  rated  speed  of 
ActionLink,  my  internal  network 
throughput  was  only  120K  bit/sec, 
and  the  latency  imposed  by  the  proxy 
server  slowed  surfing  still  further. 
Still,  that  beats  the  44K  bit/sec 
modem  connection,  and  there  are  no 
frequent  busy  signals.  Talking  on  the 
phone  while  downloading  from  the 
World  Wide  Web  had  no  apparent 
effect  on  throughput. 

While  ActionLink  does  the  job  and 
does  it  well,  I  can’t  help  wishing  for 
greater  speed.  What’s  the  alternative? 
Next  stop,  wireless.  Stay  tuned.  3 


Net  Results  Coolness  Meter 

ActionLink 

ActionTec 
www  actiontec. 
com/products/ 
homentwrk/actionlink.html 
$99 

Bottom  Line:  Easy  setup,  moderate 
throughput 
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BY  TERE  PARNELL 

eeping  unauthorized  users  out  of  sensitive 
corporate  data  files  is  like  keeping  teenagers 
out  of  Bourbon  Street  bars.  It  takes  a  skillful 
bouncer  to  block  unwanted  visitors,  yet  en¬ 
sure  that  regulars  are  welcomed  graciously. 

We  found  that  using  hardware  tokens 
with  a  good  security  server  can  make  data 
access  fast  and  easy  for  authorized  users 
and  also  keep  out  the  riffraff.  While  all  the 
security  servers  we  tested  were  comparable 
in  the  levels  of  security  and  performance 
offered,  the  servers  varied  widely  in  manageability, 
interoperability  and  price.  We  were  especially  puzzled 
by  the  dramatic  price  differences  —  a  server’s  cost 
often  wasn’t  indicative  of  its  features  and  benefits.  In 
fact,  the  overall  best  security  server  and  hardware 
token  system  we  tested, Vasco  Data  Security’s  VACMan/ 
Server  3  0,  was  by  far  the  least  expensive. 


Review 

ID,  PLEASE 


Vasco's  VACMan/ Server  proves  its  mettle  in  our  fook  at  four 
security  server/ha  rtf  ware  token  combos. 


Management  worries 

Token-based  systems  are  inherently  more  secure 
than  those  based  only  on  passwords,  but  also  more  dif¬ 
ficult  to  manage.  Of  course,  there’s  the  problem  of 
keeping  track  of  1 ,000+  tokens,  but  a  more  substantive 
concern  is  managing  the  back-end  security  server,  also 
known  as  the  authentication  server. This  is  the  plat¬ 
form  that  holds  user  configuration  information  for 
tokens  and  allows  you  to  manage  and  edit  the  informa¬ 
tion.  It  gives  the  actual  gatekeeper,  the  network  access 
server  (NAS),  the  information  it  needs  to  execute 
authorization,  authentication  and  reporting. 

When  it  came  to  management  capabilities,  VACMan/ 
Server  from  Vasco  was  the  hands-down  winner.  In¬ 
stalling  the  system  and  adding  users  couldn’t  have 
been  easier.  VACMan/Server  offers  an  array  of  access 
parameters:  time,  resource,  password,  number  of  con¬ 
current  logons  and  more.  It  lets  you  create  user  tem¬ 
plates  and  import  users  from  ASCII,  Unix,  Unix  Remote 
Authentication  Dial-In  User  Service  (RADIUS)  and 
Shiva  LANRover  files. 

VACMan/Server  was  also  the  most  flexible  security 
server  we  reviewed.  It  interoperates  with  a  variety  of 


firewalls  and  virtual  private  networks  (VPN),  and 
through  its  Proxy  Manager,  VACMan/Sever  can  sup¬ 
port  pretty  much  anyone  else’s  programmable  hard¬ 
ware  tokens. 

Most  important,  its  auditing  and  accounting  capabil¬ 
ities  are  superb.  VACMan/Server  s  Open  Database  Con¬ 
nectivity  (ODBC)  Accountant  interface  lets  you  log 
accounting  information  in  real  time  into  an  ODBC- 
compliant  database,  which  you  can  then  use  with  any 
ODBC-compliant  reporting  tool.VACMan/Server’s 
audit  database  is  comprehensive,  and  it  offers  a  mod¬ 
ule  that  can  be  used  with  Microsoft  Access  to  create  ad 
hoc  reports. 

Vasco  even  includes  a  RADIUS  test  simulator  that 
lets  you  conduct  thorough  RADIUS  testing  without 
configuring  and  deploying  a  special  test  NAS. 

Placing  second  in  the  manageability  category  was 
ActivPack  from  ActivCard. Adding  and  managing  users 
with  ActivPack  is  simple. And  more  so  than  the  other 
security  servers  in  this  comparison, ActivPack  concen¬ 
trates  on  the  management  and  administration  of  hard¬ 
ware  tokens,  making  it  easy  to  remotely  activate,  deac¬ 
tivate  and  reprogram  tokens. 


Product:  VACMan/Server  3.0 
Vendor:  Vasco  Data  Security 

For  sheer  flexibility  and 
scalability,  as  well  as  price, 
VACMan/Server  3.0  from  Vasco 
Data  Security  takes  home  our 
Blue  Ribbon. 


ActivPack  has  test  utilities  that  let  you  ensure  that 
its  database  and  RADIUS  components  are  correctly 
configured  to  work  with  client  applications  before  full 
implementation  on  the  network.  It  also  has  an  easy-to- 
use  utility  to  let  you  customize  user  messages  in 
Windows  NT  Remote  Access  Server  (RAS). 

However,  ActivPack  is  specifically  designed  for  a 
Microsoft  environment. Although  its  RADIUS  module 
supports  authentication  for  all  RADIUS-compliant  envi¬ 
ronments,  it  really  isn’t  intended  for  use  as  an  authenti¬ 
cation  server  for  anything  but  a  Windows  NT  logon, 
Windows  NT  RAS  or  Microsoft  Internet  Information 
Server  (IIS)  application. 

Coming  in  a  distant  third  for  manageability  was 
Secure  Computing’s  Safe  Word.  Safe  Word  allows  you  to 
set  user  authorization  privileges  by  time  of  week,  time 
of  day,  day  of  week  and  date  locking.  As  with  VACMan/ 
Server,  you  can  specify  the  number  of  invalid  logon 
attempts  allowed  before  the  system  locks  a  user  out. 
Safe  Word  also  has  access  quotas,  which  allow  you  to 
specify'  that  users  with  a  given  token  are  only  allowed 
to  access  the  network  a  limited  number  of  times.  How¬ 
ever,  while  adding  and  managing  users  in  Safe  Word 
isn’t  difficult,  it  is  clumsy. 

In  fact,  everything  about  Safe  Word  is  cumbersome. 
Its  reporting  capability  is  severely  limited,  and  the  best 
tiling  you  can  say  about  its  management  interface  is 
that  it  isn’t  text-based.  Furthermore,  while  the  amount 
of  data  that  can  be  stored  in  the  database  and  log  files 
is  fairly  extensive,  pulling  reports  from  them  is  an¬ 
guishing.  Managing  the  database  is  most  easily  done  by 
exporting  it  to  a  standard  format  such  as  .dbf,  making 
changes  in  your  own  database  management  system 
and  then  reimporting  it  into  Safe  Word. 


Net  Results 

Pros 

Cons  > 

VACMan/Server  3.0 

Vasco  Data  Security 
;  (630)  932-8844,  www.vasco.com 

$5,495  for  500  users 

A  Excellent  interoperability 

A  Comprehensive  audit  logs 

▼  Poor  documentation 

ActivPack  3.0 

ActivCard 

(51 0)  574-0100,  www.activcard.com 
$15,000  for  500  users 

A  Excellent  remote  token  management 
A  Easy  installation 

▼  Server  has  limited  operating 
system  support 

SafeWord  5.0 

Secure  Computing 

(800)  379-4944,  www.securecomputing.com 
l  $30,900  for  500  users 

A  Good  interoperability 

A  Excellent  audit  logs 

▼  Awkward  management  interface 

T  No  integrated  reporting 

Defender  Security  Server  3.0  A  Excellent  integrated  reporting  ▼  Poor  interoperability 

Axent  Technologies 

(301 )  258-5043,  www.axent.com 

RADIUS  Server  $2,995;  user  licenses  $105  per  user  up  to  1 0  users;  $1 2  per  user  for  more  than  5,000  users 

ScoreCard 

Manageability 

20% 

Operating  system 
integration 

20% 

Scalability 

20% 

Security 

20% 

Time  to 
authenticate 
10% 

Documentation 

5% 

Installation 

5% 

Total 

score 

VACMan/Server  3.0 

8  x. 20  =  1.60 

8  x. 20  =  1.60 

8  x  . 20  =  1.60 

8  x. 20  =  1.60 

7  x. 10  =  0.70 

5  x  .05  =  0.25 

7  x  .05  =  0.35 

7.70  | 

ActivPack  3.0 

8  x. 20  =  1.60 

8  x. 20  =  1.60 

6  x  . 20  =  1.20 

8  x. 20  =  1.60 

7  x. 10  =  0.70 

7  x  .05  =  0.35 

8  x  .05  =  0.40 

7.45  | 

SafeWord  5.0 

6  x. 20  =  1.20 

7  x. 20  =  1.40 

7  x. 20  =  1.40 

8  x. 20  =  1.60 

7  x. 10  =  0.70 

4  x  .05  =  0.20 

5  x  .05  =  0.25 

6.75  | 

Defender  Security  Server  3.0 

6  x  . 20  =  1.20 

5  x. 20  =  1.00 

5  x  . 20  =  1.00 

8  x. 20  =  1.60 

7  x.  10  =  0.70 

6  x  .05  =  0.30 

7  x  .05  =  0.35 

6.15  1 

Individual  category  scores  are  based  on  a  scale  of  1  to  10  Percentages  are  the  weight  given  each  category  in  determining  the  total  score. 
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As  for  managing  the  RADIUS  inter¬ 
face  —  well,  keep  the  documentation 
close  by,  and  be  sure  to  purchase  a  few 
hours  of  technical  support  (only  the 
first  30  days  are  free)  before  you  try  it 
for  the  first  time. Take  careful  notes  dur¬ 
ing  your  attempt  and  store  the  notes  in 
a  safe  place. 

SafeWord's  strong  point  is  its  elegant 
method  of  authentication  forwarding.  If 
a  guest  user  tries  to  authenticate,  Safe- 
Word  forwards  the  authentication  re¬ 
quest  to  the  user’s  home  domain.  With 
this  method,  authentication  domains 
don’t  have  to  be  maintained  separately 
at  each  remote  site. 

Within  North  America,  SafeWord  supports  only  hard¬ 
ware  tokens  from  Secure  Computing.  ActivCard  tokens 
are  supported  in  SafeWord  outside  North  America.  Be¬ 
cause  of  patent  limitations,  Secure  Computing  verifies  a 
customer’s  location  before  activating  support  for  Activ¬ 
Card  hardware  tokens  within  the  SafeWord  software. 

Defender  Security  Server  (DSS)  from  Axent 
Technologies  is  best  suited  for  those  who  want  one- 
stop  shopping  for  all  of  their  security  needs  because 
interoperability  is  not  its  strong  point.  Case  in  point: 
During  our  test  with  our  Aventail  VPN,  the  connec¬ 
tion  kept  locking  up  during  the  challenge/response 
sequence. 

After  a  quick  chat  with  technical  support,  we 
learned  that  DSS  isn’t  guaranteed  to  work  with  any 
VPN  but  Axent’s  PowerVPN  because  of  the  design  of 
the  token’s  challenge/response  security  feature. 

To  work  with  DSS,  a  VPN  client  must  be  able  to 
open  a  terminal  window  to  initiate  the  challenge/ 
response  routine,  which  occurs  at  the  character  level. 


Where's  Security 
Dynamics? 

Security  Dynamics 
is  a  market  share 
leader  for  hardware- 
based  tokens,  but 
the  company  never 
responded  to 
our  many  calls  and 
e-mail  invitations. 
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NOS  integration  and  scalability 

As  it  did  in  the  management  category, 
VACMan/Server  again  distinguished 
itself  in  terms  of  interoperability.  It  sup¬ 
ports  Windows  95,  NT  3  51  and  4.0,  and 
Unix.  It  also  has  optional  models  to  sup¬ 
port  NetWare  binderies,  Novell 
Directory  Services,  and  firewalls  from 
Security  Dynamics  and  Axent.Through 
its  Proxy  Manager,  VACMan/Server  can 
interoperate  with  almost  any  firewall 
and  VPN.Therefore,  it 
can  spread  happily 
throughout  your  net¬ 
work  without  becoming 
troublesome  to  integrate  or  manage. 

ActivCard ’sActivPack  is  made 
exclusively  for  Windows  NT,  which 
limits  its  scalability. 

Secure  Computing’s  SafeWord  sup¬ 
ports  tokens  from  ActivCard,  Watch- 
Word  and  SecureNet,  as  well  as  its  own. 

However,  while  it  worked  well  with  a 
BorderWare  firewall,  it  wouldn’t  work 
with  the  Axent  Raptor  firewall.  Safe- 
Word  supports  authentication  on  all 
versions  of  Unix,  VAX/VMS  and  NT  4.0 
domains.  It  supports  RADIUS  for  Win¬ 
dows  NT  RAS,  allowing  SafeWord 
through  its  RADIUS  server  to  authenti¬ 
cate  users  trying  to  access  Windows 
NT  domains. Although  SafeWord  sup¬ 
ports  a  broad  range  of  platforms  and 
authentication  forwarding  among  the  platforms,  we 
think  the  task  of  managing  them,  given  the  cumber¬ 
some  tools  provided,  would  be  monumental. 

Axent’s  DSS  for  RADIUS  runs  only  on  an 
NT  platform.  Its  one-platform  support  and 
practically  nonexistent  interoperability 
make  it  a  unified  security  system  only  for 
companies  that  want  to  buy  into  a  single¬ 
vendor  framework.  However,  its  awkward 
update  procedures  should  make  even  one- 
stop  shoppers  hesitate.  Because  it  doesn’t 
support  direct  queries  to  NT  domains,  you 
have  to  import  the  NT  domain  user  data 
into  the  DSS  database  —  and  you  have  to 
do  so  each  time  you  make  changes  to  the 
user  authorization  information. 
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This  is  disheartening  and,  in  our  opinion,  a  kludge  and 
a  potential  safety  violation.  Isn’t  an  open  terminal  win¬ 
dow  a  great  place  to  weasel  into  a  network? 

DSS  doesn’t  support  any  hardware  tokens  other  than 
its  own  although  software  developers’  kits  are  available 
for  developing  interfaces  to  support  other  cards. 

But  many  network  managers  won’t  want  to  go  to 
the  trouble  of  custom  development;  for  those  seeking 
a  soup-to-nuts  security  system, Axent  may  just  be  the 
ticket. 

Axent’s  strongest  feature  is  its  reporting  capability. 
DSS  comes  integrated  with  Crystal  Reports  and  offers 
2 1  report  templates  that  will  probably  meet  most  of 
your  needs. 


Performance  and  security 

We  attempted  to  break  into  the  servers 
as  a  hacker  would.  All  of  the  systems  per¬ 
formed  efficiently  and  well  —  and  compa¬ 
rably  —  with  authentication  time  being 
negligible.  None  of  the  security  servers 
failed  our  security  test. VACMan/Server  out¬ 
shone  the  crowd  by  supporting  the  broad¬ 
est  array  of  authentication  protocols: 
RADIUS, TACACS,XTACACS  andTACACS+. 
Also,  its  integrated  RADIUS  proxy  module  supports 
proxies  to  a  host  of  other  RADIUS-compliant  servers. 

One  of  the  greatest  features  Vasco’s  VACMan  is  not 
the  security  server,  but  rather  its  amazing  Digipass  300 
hardware  token  (see  photo). 

Digipass  300  offers  a  full  range  of  features,  such  as 
support  forTriple-DES  and  optical  data  entry,  which  no 
other  token  offers. 

ActivPack  supports  RADIUS,  Microsoft’s  IIS  and 
Windows  NT  RAS  authentication. With  this  range  of 
support,  ActivPack  offers  tight  security  for  Microsoft- 
and  RADIUS-compliant  shops,  but  prevents  it  from 
being  a  choice  for  networks  that  must  support  other 
authentication  protocols. 


Secure  Computing’s  SafeWord  supports  RADIUS, 
TACACS+  and  its  SecurelD  authentication  protocols. 

With  its  focus  on  end-to-end  security,  Axent’s  DSS 
offers  tight  security  within  a  pure  Axent  security  envi¬ 
ronment,  but  limited  options  otherwise.  For  example, 
DSS  supports  RADIUS  only  as  an  option  —  at  a  cost  of 
an  additional  $1,000.  And  as  we  mentioned.it  supports 
only  its  own  VPN,  PowerVPN  3-2. 

Installation,  documentation  and  online  help 

The  quality  of  each  product’s  documentation  varied 
as  much  as  their  other  features,  but 
the  best  performer  in  other  areas 
failed  to  follow  through  here. 
VACMan/Server’s  documentation  is 
not  only  thin  in  content,  it  is  poorly 
organized  and  difficult  to  follow. 
However,  its  technical  support  staff  is 
accessible,  responsive  and  knowledge¬ 
able. 

ActivPack  installed  smoothly,  and 
its  documentation  was  well-organized 
and  informative. 

Secure  Computing’s  SafeWord  has 
an  arcane  installation  routine  and  a 
convoluted  scheme  for  adding  licens¬ 
ing  and  serial  numbers.The  online 
help  is  skimpy.  Customers  receive  30 
days  of  technical  support  free  for  eval¬ 
uation  purposes.  After  30  days,  cus¬ 
tomers  have  to  purchase  a  support 
package  if  they  need  further  help. 

Installation  of  Axent’s  DSS  is  sim- 
ple.That’s  good,  because  the  product  has  minimal  doc¬ 
umentation.  However,  the  vendor’s  technical  support 
department  is  available  via  a  toll-free  number,  and  we 
found  its  personnel  to  be  prompt,  courteous  and 
knowledgeable. 

Keeping  out  the  riffraff 

All  of  the  systems  we  tested  provided  great  security. 
Furthermore,  each  had  unique  strong  points.  For  net¬ 
works  with  widely  distributed  authorization,  Secure 
Computing’s  SafeWord  is  a  solid  security  server  plat¬ 
form  with  an  elegant  distributed-authorization  archi¬ 
tecture.  For  sites  with  only  Windows  NT  networks, 
ActivPack  from  ActivCard  is  definitely  worth  consider¬ 
ation.  Network  managers  looking  for  a  single-vendor, 
soup-to-nuts  security  system  that  includes  firewalls, 
VPNs,  authentication  and  authorization  servers,  should 
consider  Axent’s  DSS. 

Security  being  equal  among  servers,  however,  we 
think  that  for  ease  of  management,  reporting  capabili¬ 
ty  and  interoperability  with  other  vendors’  firewalls, 
VPNs  and  tokens,  VACMan/Server  was  tops.  Its  great 
performance  and  reasonable  price  tag  are  also  defi¬ 
nitely  advantages. 

Parnell  is  a  telecommunications  consultant  and 
author  with  more  than  18  years  of  experience  in  the 
telecommunications  and  data  networking  industry. 
She  has  written  many  articles,  columns  and  product 
reviews,  and  is  the  author  of  four  books  on  telecom¬ 
munications,  telephony  and  data  networking.  She 
can  be  reached  at  RedReviews@aol.com. 
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Metering  messages 


E-mail  chargeback  policies  force  workers  to  pay  the  price 
for  bogging  down  the  network  with  nonbusiness  traffic. 


BY  PAUL  MCNAMARA 

Looking  for  a  way  to  discourage  frivolous 

e-mail  use  within  your  company?  Try  dock¬ 
ing  workers’  pay  for  any  messages  they 
send  over  a  preset  maximum.  That  will 
make  those  joke  lists  and  animated  greet¬ 
ing  cards  seem  a  whole  lot  less  amusing. 
Chargeback  policies  have  been  attempted  before, 
but  experts  say  most  organizations  want  no  part  of 
such  Draconian  measures.  However,  a  growing  number 
of  companies  are  turning  to  chargeback  policies  as  a 
tool  for  planning  future  infrastructure  needs  and  to 
ensure  that  departments  pay  their  fair  share  for  the 
network  resources  they’re  using. 

According  to  a  survey  of  50  organizations  by  Ferris 
Research  of  San  Francisco,  about  40%  have  implement¬ 
ed  some  kind  of  chargeback  mechanism.  Of  that  group, 
22%  assess  charges  based  on  overall  network  services, 
while  just  18%  are  charging  for  e-mail  usage  only. 

These  numbers  are  certain  to  rise  as  e-mail  net¬ 
works  continue  to  mushroom,  the  result  of  corporate 
mergers  and  acquisitions  and  e-mail  itself  becoming 
more  ubiquitous,  sophisticated  and  resource-intensive. 

WHO  PICKS  UP  THE  TAB? 


“Messaging  is  starting  to  cost  more  and  more,  and 
management  is  starting  to  rely  on  it  more  and  more,” 
says  Bob  Demond,  president  of  RD  Software  Services,  a 
reseller  based  in  Bakersfield,  Calif.  “The  natural  thing  is 
to  start  spreading  those  costs  back  to  the  people  who 
are  consuming  the  service.” 

As  the  messaging  and  Internet  manager  for  the  U.S. 
Department  of  Transportation,  George  Ramick  oversees 
an  e-mail  hub  with  an  X.500-based  directory  that  con¬ 
nects  seven  different  messaging  systems  used  by 
75,000  federal  employees  in  14  agencies.  Ramick’s 
operation  is  funded  entirely  by  a  chargeback  system 
that  imposes  a  flat  fee  on  each  agency,  adjusted  a  bit 
based  on  the  number  of  users. 

“At  one  point  we  were  going  to  charge  based  on 
kilobit  usage,  but  our  chief  information  officer  inter¬ 
vened  and  said  no,”  Ramick  says. “We  didn’t  want  to 
provide  an  incentive  for  Department  of  Transportation 
agencies  to  step  away  from  using  our  systems  because 
they  thought  they  could  find  a  cheaper  way.” 

However,  Ramick  wants  to  show  agencies  that 
they’re  getting  their  money’s  worth  from  his  services. 
Toward  that  end,  he’s  implementing  reporting  software 
from  Tally  Systems.  Dubbed  Veranda,  the  package  also 
allows  companies  to  implement  charge- 
back  policies  based  on  usage  parame¬ 
ters,  such  as  the  total  number  or  volume 
of  messages.  Veranda  costs  $35,000  for  a 
10,000-user  license. 

“We’re  like  any  other  business,  so 
what  I  need  to  do  is  offer  services  at  a 
reasonable  rate  and  demonstrate  that 
the  services  I’ve  provided  are  real,” 
Ramick  says. 

Naturally,  Department  of  Transporta¬ 
tion  agencies  such  as  the  Federal  Avia¬ 
tion  Administration  and  the  U.S.  Coast 
Guard  aren’t  always  cognizant  of  the 
value  they’re  receiving  from  the  e-mail 
hub.  “People  say  they  don’t  use  the  sys¬ 
tem  that  much,  but  they  don’t  know 
how  much  they  use  it,”  Ramick  says. 

Along  with  Tally,  several  other  ven¬ 
dors  provide  software  for  measuring 
e-mail  usage  or  applying  chargeback 
fees,  including  ViewPoint  from  Auto¬ 
mated  Business  Solutions,  AppManager 
Suite  from  NetlQ  and  2MA  from 
MessageWise. 


George  Ramick,  messaging  and  Internet  manager  for  the 
U.S.  Department  of  Transportation,  passes  the  cost  of  the 
federal  bureaus  mail  hub  along  to  the  agencies  that  use  it. 

Moreover,  there  are  many  different  ways  to  assess 
chargeback  costs,  including  systems  based  on  a  fixed 
rate  per  user,  number  of  messages  sent  or  received, 
storage  space  used,  or  some  combination. 

“Many  folks  are  just  charging  for  Internet  e-mail 
traffic  because  that’s  where  the  cost  of  the  band¬ 
width  is  the  largest,  and  where  they  really  have  to 
watch  traffic  to  make  sure  they  have  a  large  enough 
pipe,”  says  Karen  Kaliski, Tally’s  vice  president  of 
product  marketing  in  Lebanon,  N.H. 

Rolling  out  a  chargeback  program  can  be  tricky,  and 
experts  say  top-level  executive  support  is  critical. 

“A  lot  of  people  are  just  opposed  to  the  idea  of  being 
charged  for  something  that  they  believe  is  fundamental 
infrastructure,”  says  Jonathan  Penn  of  Ferris  Research. 

The  ongoing  proliferation  of  junk  e-mail  —  jokes, 
greeting  cards  and  excessive  personal  correspondence 
—  has  been  one  of  the  primary  forces  driving  interest 
in  chargeback  schemes." Every  manager  I  know  is  con¬ 
cerned  about  how  much  garbage  is  coming  in  that  is 
not  work-related,”  says  RD  Software  Services’  Demond. 

Do  not,  however,  expect  e-mail  chargeback  to  be  a 
cure-all  for  this  problem. “It’s  a  little  early  to  tell 
whether  [chargeback]  really  influences  user  behavior,” 
Penn  says. 

McNamara  is  a  senior  editor  at  Network  World.  He 
can  be  reached  at  paid_mcnamara@nww.corn. 


While  e-mail  chargeback  policies  are  expected  to  become  more 
popular,  few  companies  have  implemented  them  to  date. 
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on  all  network 
services:  22% 


A 


Chargeback 
based  on  just 
e-mail:  18% 


No  chargeback 
policy:  60%  — 


SOURCE  FERRIS  RESEARCH.  SAN  FRANCISCO 


lore 


Inline 


>  Check  out  Ferris  Research's  report  on 
e-mail  chargeback  systems. 

>  Get  details  about  reporting  products 
that  can  help  you  implement  a 
chargeback  system. 
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ES  PRODUCT  MANAGEMENT  PROFESSIONALS 


/rentier 

**  COMMUNICATIONS5 

www.  frontiercorp.  com 


NYSE:  FRO 


les. 


We  are  looking  for  strong  team  players  with  a  proven  track-record 
in  different  areas  of  Data/IP  product  development  to  join  our  growing 
Frontier  team.  We  are  specifically  looking  to  identify  Managers  with  strong 
technical  and  marketing  skills  to  help  establish  developed  products. 

Data  Services  Project 
ATM  Product  Development 
VPN  Product  Development 
Data  Services  Tools  Development 
Data  Services  Product  Development 
Data  Services  Platform  Development 


Frontier  Corporation  has  created  the  datacentric 
communications  company  of  your  dreams.  Our 
tradition  of  technological  breakthroughs  in  IP 
audio,  video  and  data  conferencing  includes  the 
Optronics  Networksm — providing  our  customers 
with  faster  transmission,  greater  bandwidth  and 
unrivaled  reliability. 


Make  your  wishes  come  true.  Email  your  resume  to: 
Christopher_Garrie@frontiercorp.com 
Fax:  716-232-1045.  Mail:  Corporate  Staffing-CG, 
Frontier  Corporation,  180  S.  Clinton  Avenue  Rochester, 
NY  14646.  We  value  diversity  in  the  workplace.  EOE 


St  Jude  Children^ 
Research  Hospital 

ALSAC  •  D.nnv  Thom...  Found., 

St.  Jude  Children’s  Research  Hospital,  located 
iii  Memphis, Tennessee,  is  one  of  the  world’s  premier 
research  centers  for  research  and  treatment  of 
catastrophic  diseases  in  children,  primarily  pediatric 
cancers.  Our  mission  is  to  save  children’s  lives  by 
finding  the  causes  of  catastrophic  illnesses,  improving 
treatment  and  finding  cures  for  their  diseases.  We  are 
currently  offering  an  excellent  career  opportunity  to 
someone  with  the  desire  to  be  a  part  of  our  mission. 

NETWORK  ENGINEER 

You  will  be  responsible  for  the  overall  planning 
of  the  enterprise  network  including  the  design, 
installation,  maintenance,  management  and  coordination 
of  the  hospital’s  local  and  wide  area  networks. 
Also  responsible  for  technical  architecture  related 
to  LAN/WAN.  A  BS  or  equivalent  experience  in 
Networic/Telephony  Engineering  or  related  field  required. 
At  least  4  years  experience  in  data  communication  and 
multi-vendor  computer/netwoik/telephony  operating 
systems  and  2  years  experience  in  network  design  and 
implementation  essential.  Must  have  demonstrated 
proficiency  in  project  management,  network  support  and 
design,  and  leadership  skills. 

Send  resume  to:  St.  Jude  Children’*  Research 
Hospital,  Human  Resources  Dept.,  332  N. 
Lauderdale,  Memphis, TN  3*105.  Fax:  901-495- 
3123.  E-mail:  human.resources@st1ude.org  Visit 
our  website  at  www.stjude.org  for  more  information. 
EOE  M/F/D/V 


Your  Ad 
Could  Be 
Here  For 

$512.50 

Call  Recruitment 
1-800-622-1108 
for  more  info. 

(less  if  you 
have  a  contract) 


A  position  is  available  for  a 
Software  Engineer  with  an 
Atlanta-Based  software  developer. 
Healtheon/ActaMed  produces  and 
markets  advanced,  Internet  based 
healthcare  software.  Candidates 
for  this  position  should  possess  a 
Master’s  degree  in  Computer 
Science  or  a  related  field.  The 
position  will  involve  the  design, 
development  and  enhancement  of 
the  Middleware  systems  which 
utilize  CORBA  architecture,  C++ 
programming  language,  SQL  and 
relational  database  software, 
object-oriented  analysis  and 
design  methodology  and  Internet 
technology.  Applicants  must  have 
at  least  one  year’s  experience  in 
C++  programming,  CORBA, 
Middleware  development,  SQL 
and  relational  database  software, 
analysis  and  design  methodology 
and  UNIX.  The  starting  salary  for 
this  position  ranges  from  $63,148 
and  up  depending  upon  education 
and  experience.  Apply  by  mail 
with  TWO  resumes  to:  Lois 
Rickard  7000  Central  Parkway 
Suite  600  Atlanta,  GA  30328 


Systems  Consultant 
Prov.  Services  to  clients  re:  design  & 
dev.  of  business  systems  &  applica¬ 
tions;  design  software  products,  mod¬ 
ules,  interfaces,  &  menu  screens,  using 
DB2  with  COGEN  &  Basic  Mapping 
Support  Facilities  under  CABS  envi¬ 
ron.;  test  &  modify  system  specs, 
working  on  DB2  features  (Data 
Security  &  Integrity,  Referential 
Integrity,  Isolation  Levels,  &  Resource 
Lock  Mgmt.  Services),  with  SQL 
Libraries,  Cross  System  Product 
Record  Definitions,  Graphic  Display 
Mgr.,  &  Reporting  tools  like 
CABS/BEM  Printing  Routines,  SQL 
Processor  File  Input,  &  SQL 
Generator;  code  &  generate  reports 
with  Professional  Report  Writing 
Facilities,  convert  client  data  to 
COGEN  &  CAB  environ.;  prov.  Tech. 
Support  to  users.  $63,149/yr.  40 
hrs/wk.  B.S.  in  Comp.  Sc.  or  Comp. 
Eng.  req'd.  2  yrs.  exp.  req'd  in  job 
offer  or  2  yrs.  related  exp.  as  Sys. 
Analyst,  Programmer  Analyst,  or  Sr. 
Support  Eng.,  to  include  use  of  noted 
skills  in  job  duties.  B.S.  may  be  for¬ 
eign  equiv.  Degree.  Will  work  at  unan¬ 
ticipated  locations  in  the  U.S.  Submit 
2  resumes  or  apply  to  the  GA  dept,  of 
Labor,  Job  Order  #GA6341540,  2943 
N.  Druid  Hills  Road.,  Atlanta,  GA 
30329,  or  the  nearest  Dept,  of  Labor 
Field  Service  Office. 


For  More 

Information  About 
Advertising  in 
Network  Careers 

1-800-622-1108 


NETW^RLDl  INTEROP 

Las  Vegas  Atlanta 
May  11-13  Sept.  14-16 

For  More  Information  Call:  800-622-1108  Ext.  7510 
Or  Go  To  www.nwfusion.com 


Network  World 

Signature  Series 

Network  World’s  Signature  Series  issues,  published 
bimonthly,  provide  insights,  opinions  and  information 
on  the  most  important  issues  shaping  the  networked 
world.  Showcasing  the  writing  skills,  design  talent 
and  network  expertise  of  the  Network  World  staff  and 
contributors,  Signature  Series  issues  help  readers 
gain  valuable  new  perspectives  on  their  jobs  and 
careers,  network  technology  and  the  world’s  fastest 
growing-and  most  dynamic-industry.  The  award¬ 
winning  Signature  Series  issues  include: 


■  The  Network  World  200  Issue 

■  The  Best  Issue 

4/26/99 

11/15/99 

■  The  You  Issue 

The  Power  Issue 

Showcasing  the  Network 
Leaders:  7/26/99 

12/27/99-1/3/00 

■  The  Buzz  Issue 

9/27/99 

For  more  information  on  advertising  your  recruitment 
message  in  these  issues  call:  800-622-1108  Ext.  7510 
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SNMPc  Enterprise 
Manager 

Distributed  management 
tor  Windows  NT.  Supports 
remote  consoles  and 


Network 

Management 

for  Microsoft  Windows 


polling  agents,  Web  Trend 
Reporting  and  more. 

SNMPc  WorkGroup 
Manager 

Affordable  management 
for  small  networks. 

With  an  installed  base 
of  over  60,000  copies, 
this  popular  tool  is  resold 
by  major  OEMs,  including 
Cisco  and  ACC. 


^  Castle  Rack 

▼  Computing 

Phone:  408.366.6540 
Fax:  408.252.2379 
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INSTRUMENTS 


Observer  identifies  network  trouble  spots;  and  costs 
thousands  less  than  expensive  hardware-based 
analyzers.  If  you  have  network  slowdowns  would,  you.. 

know  if  they  are  being  caused  by  packet  errors.  . 
broadcast  storms  or  overloaded  utilization?  Find  out 
with  Observer  or  Distributed  Observer.:/,, 


protocols,  including  TCP/IP  (v4  and  v6). 
NetBIOS/NetBUEl,  IPX/SPK  Appletalk.  SNA. 

and  DECnet. 

Switched  mode  sees  all  ports  on  a  switch 
gathering  statistics  from  the  entire  switch  or 
packet  capture  from  any  port  or.  portsFinally  a 
protocol  analyzer  that  can  be  used  in 
switched  environments! 

•  Long-term  network  trending  .collects  statistical 
baseline  data  for  days,  weeks,  months  or  years 
for  review  and  reporting. 

Distributed  version  available  for  $1290  (includes 
1  local  and  1  remote  Probe).  Additional  Probes 
are  $295  per  local  or  remote  segment  or  switch. 

•  Network  Instruments'  optimized  ErrorTrack™ 
NDIS  drivers  display  true  errors-by-station. 

Includes  collision  expert; 

•  Track  router  utilization/traffic  in  real  time 
•  Ethernet  (10/1 00/1 000),  Token  Ring,  FDD I 


See  what  you  have  been  missing!  Call  800-526-7919  for  a  FREE  DEMO  or  download  from  our  web  site. 


©  1999  Network  Instruments,  LLC  -  Corporate  Headquarters  (612)  932-9899  FAX  (612)  932-9545 
UK  and  Europe  +44  (0)  1322  303045  FAX  +44  (0)  1322  303056  info@networkinstruments.com  www.networkinstruments.com 
Observer,  Network  Instruments  and  the  "N"  logo  are  registered  trademarks  of  Network  Instruments,  LLC  Minneapolis,  MN  USA 
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Remote  Trouble-Shoot  &  Reboot 


^  Dial-up  and  telnet  access  to  Remote  Sites 

✓  Select  Multiple  Console/AUX  Ports 

✓  Reboot  power  on  selected  devices 


RACK  MODEM 


RS232  CONSOLE  PORTS 

REBOOT  SWITCH 


AC  POWER 


ROUTER 

S£ 

DSU/CSU 

\ 

MUX 

COMM. 

\ 

SERVER 

FILE 

\ 

SERVER 

When  it  comes  to  Remote  Site  Management,  no  one  offers  more  choices  to  access 
multiple  console/AUX  ports  and/or  reboot  power  than  NetReach  products  from 
Western  Telematic.  We  offer  the  flexibility  you  need  to  mix  and  match  equipment  for 
small  or  large  remote  management  strategies.  NetReach  products  are  now  installed  in 
thousands  of  network  sites  world  wide.  Our  customers  know  they  can  depend  on  our 
superior  quality  and  reliability  for  their  mission-critical  operations. 


Console/AUX  Port  Managers 

Remote  access  to  multiple  R5-232  Console/AUX  Ports 

•  TCP/IP  (telnet)  and  dial-up  (modem)  •  Continuous  off-line 
buffering  •  Password  Protected  •  Any-to-Any  Port  Matrix 
Switching  •  AC  or  -48V  DC  power  options  •  Various  models 
from  4  to  64  ports 


Intelligent  Remote  Power  Switches 

Reboot  “locked-up”  network  equipment 

•  AC  and  -48V  DC  versions  •  Password,  Site  ID,  Plug  Labels 

•  On/Off/Reboot  power  switching 


Rack  Mount  Moc 

5 ingle  modem  for  Dial-up  acces  to  console  ports 

•A  C  and  -48V  DC  powered  •  55.6Kbps  V54+  • 
only  one  19”  rack  space 


.equsres 


□  western 
D  telematic  inc. 


(800)  854-7226  •  www.wti.com 


5  Sterling,  Irvine,  CA  92618-2517 
Facsimile:  (949)  5S3-9St4 
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Servers 

Routers 

Kiosks 

Anything! 


PowerPAL  From  Dataprobe 


From  Any  Telephone! 
Anytime!  Anywhere! 


10  Amp  AC  Power  Control 
Tone  Controlled,  On/Off  Reboot 
Utilizes  Existing  Dial  Line 
Security  Password  Protected 
Int’l,  DC,  Relay  Versions  Available 


INC'  Ext  EI 

11  Park  Place  Paramus,  NJ  07652  Web:  www.dataprobe.com  Your  Reach 
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A  KVM  switch  is  only  as  smart 
as  the  brains  behind  it. 


Demand  Raritan. 


Connect  and  operate 
any  combination 
of  computers 
(PC,  Mac,  Sun, 
Alpha,  HP9000, 
RS/6000,  SGI) 
without  having 
to  change  cards 
or  dip  switches. 


Now  Available:  . 
MasterConsole  MX4 
Multi-User 
Matrix  Switch 


Unique  Raritan 
emulation  technology 
dedicates  a  “brain  ”  to 
each  channel  to  deliver 
automatic  booting  and 
flawless  operation, 
and  to  prevent 
keyboard  and 
„ ,  mouse  lockup. 


•  Intelligent  on-screen  user  interface 
simplifies  switching,  operation,  and 
administration.  Premium  video 
components  and  double-shielded 
coaxial  cables  deliver  hi-res  video. 


Easy  to  install,  easy  to  use.  Start 
with  2,  4,  8,  or  16  computers. 
Expand  to  control  up  to  256. 
Operate  from  central,  remote, 
or  multiple  locations. 


Request  this 
FREE  guide 
to  learn  critical 
factors  about  .  » 
KVM  switch  ( 
performance. 


Call  toll  free  1-800-724-8090,  X83, 
or  visit  us  online  at  www.raritan.com 


Raritan 


E-ma'I:  sales@raritan.com  Phone:  732-764-8886  Fax:  732-764-8887 
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INTERNET 


PROXY 


PROXY/MAIL  SERVER  FOR  WINDOWS  95/98/NT 

Connect  your  entire  network  to  the  Internet  with  only  one  ISP  account,  one 
modem,  one  dial-up  connection  and  only  one  (dynamic)  IP  address.  You  will 
increase  the  throughput  and  lower  your  connection  fees.  The  firewall  will  protect 
your  data  and  the  mail  server  will  transfer  all  your  e-mail. 

Find  out  for  yourself  why  WinProxy  is  distributed  in  almost  70  countries 
worldwide  and  why  it  received  "THE  BEST  OF  LANTIMES"  award  from  the  LAN 
Times  Testing  Center  and  the  best  rating  from  the  leading  software  archives 
(Tucows,  ZDNet). 


THE  BEST  OF 

LANTIMES 


•*  f 

TUCOWS 


5  x  COW 


SWBL 

0  PROXY 


received  from 

the  LantimesTesting  Center 
Apr.  13  issue,  Pg.32 


Test  this  outstanding  product  now  and  get  the  fully  fun¬ 
ctional  2-user  demo  at  our  WWW.  20-day  trial  key  for 
unlimited  testing  available  too.  Test  it  for  free! 


A  chance  for  resellers,  system 
integrators,  consultants  and 
Internet  service  providers!  Ask 
for  special  conditions  &  prices! 


WINPROXY  PRICE  LIST 


5-user  -  $  >00 

10-user  -  S  199.00 
unlimited  —  $  299.0° 


ORDER  C  ML  N  !  www.winpi  x  net 
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Reboot  and  Access  Remote  • — \ 
Equipment  With  ONE  PRODUCT 

FEATURES 


Power  Control,  reboot  or  turn  on/off  remote  equipment 
RS-232  Console/Aux  port  access  to  remote  equipment 
Dial-up  access  with  internal  33.6  kbps  modem 
Telnet  access  with  internal  network  interface 
Local  console  for  onsite  access  to  connected  equipment 


DS4D-RPC 
(Rear  View) 


Control/Aux  Port 
Access 


ELIMINATE  COSTLY 
REMOTE  NETWORK 
SERVICE  CALLS  with 

BayTech’s  complete  line  of  remote 
site  management  products. 

These  products  will  help  keep 
your  network  running. 


Power  Control 

1 


Router 


iSDSU 
Hub 


Server 


Also  available,  seperate  power  control  and  console  access  solutions 

800-523-2702  www.baytechdcd.com 
International:  228-467-8231  Fax:  228467-4551 
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i  ue  uiiu  oj  me  weiworu  tmy  zne  rmu  oj  u 
Hub'  of  the  Network  Buy*  *  the  Hub  oj  the  i 

I  i  Buy  *  The  Huh 


The  Ultimate  View! 


■< 


fj 


UltraView:  the  keyboard-monitor-mouse  switch  allowing  you 
to  control  multiple  platform  systems  on-screen  from  one  console! 

Create  space  in  your  computer  room  by  eliminating  extra  equipment. 
UltraView  allows  one  keyboard,  monitor,  and  mouse  to  control  all  of 
your  computers,  any  mix  of  PC,  MAC,  SUN,  HR  SGI,  and  more. 

UltraView  accesses  each  CPU  from  menus  that  pop  up  over  your  existing  video. 
Switch  from  the  keyboard,  on-screen  menus,  front  panel,  or  RS  232  port  of  the  UltraView. 

Customize  your  UltraView  on-screen  menu  with  personalized  port  names,  colors, 
fonts,  and  display  window  placement  so  that  the  entire  system  makes  sense  to  you. 

Upgrades  are  easy,  too!  Add  up  to  16  CPUs  on  one  switch  and  daisy-chain  to 
access  up  to  256  computers!  Plus,  Flash  memory  upgrades  keep  you  on  the  leading  edge  of 
future  improvements  ensuring  that  the  switch  never  becomes  obsolete.  The  excellence  you 
have  come  to  expect  from  Rose  is  apparent  in  UltraView's  simple  setup.  You'll  easily  define 
the  automatic  Scan,  Screen  Saver,  and  other  parameters-so  you  quickly  get  down  to  the  real 
business  at  hand. 

UltraView  is  the  most  flexible  KVM  switch  on  the  market.  You  can  choose 
between  3  different  chassis  sizes  and  4  different  platforms:  PC  Only,  SUN  Only,  APPLE 
Only,  and  Multi-Platform. 

With  UltraView  you'll  see  how  simple  it  is  to  switch  from  CPU  to  CPU-making 
your  work  a  lot  easier  and  faster.  Call  our  sales  staff  today  for  detailed 
information  on  any  computer  system  application. 


Call  For  A  Free  Catalog: 

♦  Key  boar d/Video  Control 

♦  Print  Servers 

♦  Data  Szvitches 


800-333-9343 

Visit  our  web  siteatwww.rosel.com 


On-screen  display  menu-This  screen  shows  the  overlay 
menu  with  the  selection  for  the  color  scheme  popped  up. 


ELECTRONICS 


10707  Stancliff  Road  Houston,  Texas  77099 

Phone  281-933-7673  Fax  281-933-0044 


ma! 


•t* 


.J»,l 
*  -  -  _ 


*  *  * m  +  m 

i  * 


Less  is... 


Manage  all  of  your  servers  with  just  one  keyboard,  monitor 
and  mouse!  The  AutoView  Commander  eliminates  the 
need  for  peripherals  at  every  computer.  Fewer  peripherals 
means  less  clutter  and  less  wasted  money. 


MORE  Room 
MORE  Control 
MORE  Cost-effective 
What  more  could  you  want? 


Designed  for 


Microsoft* 

WindowsNT* 


NetWare. 


Cybex.the  Cybex  logo,  Auto  View  and  Commander  are  trademarks  or 
registered  trademarks  of  Cybex  Computer  Products  Corporation 


Contact  us  at  CYBEX  (800)  932-9239, 
fax  (256)  430-4030  or 

www.cybex.com 


MwiruMve 


#227  @  www.networkworld.com/infoxpress 


For  Free  Product  Info  •  www.networkworld.com/infoxpress 


Network  World  March  1,  1999  www.nwfusion.com  53 


For  Free  Product  Info* 


Watchdog  2000™monitors  your  unattended  sys-  .  ,  ««■»..  ■  ..... 

terns  even  when  you’re  on  vacation!  In  the  (AlltobOOt  WstchdOQ  2000 
event  of  a  lock-up,  Watchdog  2000  automatically 
"reboots"  the  system  it  is  monitoring! 


Watchdog  2000  is  essential  for  maintaining  unat¬ 
tended  kiosks,  security  systems,  scientific  instru¬ 
mentation,  and  any  other  equipment,  which  must 
run  continuously.  Watchdog  2000  addresses  the 
problem  of  chronic  system  lock-ups  when  no 
one  is  at  the  site  to  manually  reboot  the  system. 
Includes  all  necessary  hardware  and  Windows 
software.  Watchdog  2000  $299.00 


TeleSwitch  Corp. 

124  N.  Bicycle  Path 
Selden,  NY  11784 
Telephone:  516-244-7075 
FAX:  516-244-5725 
www.teleboot.com 
sales@teleboot.com 


TM 


Call  Today  Toll  Free  1-877-652-724 1 


Made  with  Pride  in  the  U.S.A. 


ACCESS:  DENIED!  ™ 


The  unique  hardware  "Firewall"  device  that  protects  your 
system  from  hackers  and  other  unauthorized  persons  -  24 
hours  a  day  *******  Like  a  junkyard  dog! 


ACCESS:  DENIED!  ™  -  $259.00 


It  all  comes  down  to  questions.  Questions 
that  challenge  your  expertise  about  Microsoft 
products.  Question  yourself  -  are  you  ready? 
Be  absolutely  sure.  With  Spike  and  the  gang's 
certification  guarantee,  you  will  be.  Because 
once  you've  completed  the  program,  you'll  pass 
with  flying  colors  or  get  your  money  back.* 
And  don't  worry,  because  as  Microsoft 
Certification  changes,  Transcender  will 
have  you  covered. ..without  question. 


•  Most  Realistic  MCSE  and  MCSD 

Simulations  Available 

•  Detailed  Answers  and  Explanations 

•  NEW!  Computer  Adaptive  Testing  Features 

•  NEW!  Simulation  Questions 

•  Money  Back  If  You  Don't  Pass  Guarantee* 

•  From  $129  -  $179 


Transcender.  America’s  #1  Exam  Preparation  Software. 


Transcender® 

Corporation 


To  order,  call  Howard  @  (615)  726-8779  or  fax  (615)  726-8884;  242  Louise  Ave.;  Nashville,  TN  37203. 

■  ■  nx%  ®  1999  Transcender  Corp.  All  Rights  Reserved.  Microsoft  is  a  registered  trademark  of 

W  W  W  ■irdnpCcnUvraWU  Hi  Microsoft  Corporation.  Multi-user  licenses  are  available.  *Call  or  see  our  Web  site  for  details. 


Networks,  modems,  computers,  phone  systems,  plus  many 
other  systems  may  be  remotely  accessed  only  by  entering  a  7 
digit  security  code  with  100,000,000  user  settable  combina¬ 
tions.  After  3  unsuccessful  attempts,  the  device  locks  out 
access  to  the  system  for  15  minutes  (user  settable). 
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For  a  limited  time 


people  register  for  l 


program 


Includes  hands-on  training  for  ALL  6  modules,  Microsoft  approved  study  gi 
MCSEQuest  testing  software  (with  hundreds  of  practice  questions),  MS  Wind 
Technical  Support  Training  and  demo  version  of  NT  4.0.  Offer  valid  for  day  sesi 
Both  candidates  must  register  together.  Second  person  pays  for  books,  software  and  I 
only.  Call  or  visit  Microhard  website  for  complete  terms  &  conditions.. 

certifications:  MCP,  MCSD 
CS58C®,  ORACLE,  CNE,  CNA,  A+ 


Microsoft 


60  WITH  THE  BEST.  FIND  WHY  COMPANIES  LIKE  AT&T,  ARTHUR  Al 
ITOROLA,  US  ROBOTICS  AND  THE  US  DEPT.  OF  DEFENSE  CHOOSE  ( 


ALUS  OAK  BROOK  ORLANDO  ST.  LOUIS  SCHAUMBURG  THORNHILL  TORONTO 

77-MBCROHARD  www.microhi 
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FREE  email  newsletters 


from  the  most  trusted  name 


Network  World  has  introduced  a  series  of 
free,  email  newsletters  developed  exclu¬ 
sively  for  busy  network  IS  professionals. 
These  newsletters  are  emailed  twice- 
weekly  and  will  alert  you  to  key  develop¬ 
ments  in  areas  such  as: 

Frame  Relay. 

Web  Application  Development 

Network/ Systems  Management 

High-Speed  LANS 

NetFlash  Daily 

Windows  NT 

Groupware  and  Messaging 

and  more. 

They  will  provide  advice  and  insights  on 
the  key  issues  shaping  these  technologies. 
There’s  also  a  Career  Advisor  newsletter 
aimed  at  helping  you  get  the  most  from 
your  job.  The  newsletters  combine  the 
expertise  and  knowledge,  along  with 
the  immediacy  of  email  to  help  you 
keep  abreast  of  the  changing  net¬ 
worked  world. 


http://www.nwfusion.coni/fDcus . 


networking/ 


54  Network  World  March  1,  1  999  www.nwfusion.com 


For  Free  Product  Info  •  www.networkworld.com/infoxpres 


10/100  Network  Cards 


Hubs 


Call  for  Current  Pricing  on  Any  Manufacturer’s  Products 


1-800-FOR-LANS 

1-800-367-5267 

sales@west-hills.com 


wetf  HILL* 
lam  mieMi 


7949  Woodley  Avenue,  Van  Nuys,  CA  91406 
Technical  Support:  818-773-8171 
Fax:  1-818-773-8932 


Visa/MasterCard/Discover/American  Express  •  Fast  Delivery  •  Most  Orders  Ship  The  Same  Day  •  Prices  Subject  To  Change  Without  Notice 


NBASE  MegaStack  100  -  Fast  Ethernet  H 
24  10/100  Port  autosensing  stackable  hub 
with  option  for  fiber  uplink  (NH1 026)  . 


Call  for  Prices 
Call  for  Prices 
Call  for  Prices 


West  Hills 


Solutions 


,  Built-in  NT1,  IP/IPX 
. $1,285 

trator  3000 

Modems  (001843-00) . $5,430 


(Cisco2501  -CH) 


Call  for  Prices 


cUcopre 


3COM  SuperStack  II  Switch  1100 

The  Switch  1100  provides  12-24  switched  Ethernet  ports  and  2 
10/100  ports.  (3C16950/1)  . Call  for  Prices 


(NH204 

Gigabit  Ethernet  Mo 
NBASE  MegaSwitch 

8-port  lOBase-T  and  2-port  10/100  (NH210) 


100Base-TX  to  100Base-FX  Transceiver 

lOBase-T  to  AUI/FL  Transceiver . 

BNC  to  RJ45  Transceiver . 


3COM  Fast  EtherLink  XL 

Auto-sensing  10/100  PCI  RJ45  network  adapter 

(3C905-TX)  . 


INTEL  PRO/100  TX  PCI 

High  performance  10/100  32  bit,  RJ45,  adapter. 
(PILA8460) 


T1/FT1 

V.35,  CSU/DSU.  (1202060L1)  . 

85 

Bridge  Router  with  2  Pots  and  4  RJ45  ports 


D-LINK  10/100  Hubs 

16  and  24  10/100Base-TX  Dual  Speed  Un 
16-Port  (DFE-916X) . $616  24-Po 


serial  ports/8  Asynchronous  ports. 
CH) . 

Pricing  for  ISP’s 


$2,129 


for  Prices 


$780 


Gigabit  Network  Adapter 
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Introducing  the  Router  that’s  easier  to  configure. 


Web 
Browser 
Configuration. . . 
It’s  Easier! 

Introducing  The  Emerald,  a 
Frame  Relay  Access  Router  to 
replace  all  others.  Why?  Web 
Browser  Configuration!  Use 
your  HTML  3.2  compliant 
browser  to  set  up  and 
configure  your  Emerald.  The 
Emerald  allows  you  to  monitor 
your  network  from  your 
desktop  using  the  Web 
Browser  you  use  every  day. 

For  less  than  the  price  of  one 
week’s  training  on  those  other 
routers,  you  can  be  up  and 
running  in  minutes! 


Call  800-223-9758  to  receive  a  FREE  demo  Emerald  to  try 
for  45  days.  If  you’re  not  convinced  it’s  the  easiest  router 
you’ve  used,  send  it  back.  What  could  be  easier? 


Take  a  look,  you’ll  like  what  you  see. 


American  Technology  800-777-5511or  +1-406-777-5511  fax:  406-777-5512  email:  mfo@atli.com 


American 

TECHNOLOGY 

www.atli.com 
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The  Simple,  Powerful  &  Affordable 

firewall 

•  Proven  Firewall  Technology 

•  Network  Address  Translation 

•  Unlimited  User  License 

•  High  Performance 

•  Transparent  Network  Access 

•  Easy  to  Configure  &  Operate 

•  Remote  Web  Based  Management 

•  Cost  Effective 

•  Time  Based  Access  Control 

•  URL  &  Content  Filtering 

•  Email,  Pager  &  SNMP  Trap  Alerts 

•  Email  Proxy 

•  ISDN,  xDSL  &  Cable  Modem  Support 

•  Win95/NT  Management  Client 

$99 


1 -800-775-4GTA 

Web:  http://www.gnatbox.com 
Email:  gb-sales@gta.com 
Tel:  +1  -407-380-0220  Fax:  +1-407-380-6080 
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TimePlex  Group 


to  the 


For  the  lowest  price  on 
TimePlex  Equipment 


All  hardware  is  staged 
and  pre-tested. 
If  it  doesn't  say 
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DSL, 

continued  from  page  1 

a  shared  medium. 

That  is  true,  at  least  until  the 
DSL  line  hits  the  first  device  in 
the  service  provider  network, 
known  as  a  DSL  Access  Multi¬ 
plexer.  There,  DSL  access  lines 
are  typically  aggregated  onto 
an  oversubscribed  backhaul 
trunk  into  the  carrier’s 
switched/routed  network. That 
trunk  represents  a  potential 
bottleneck  that  could  make 
the  service  crawl. 

“All  networks  are  oversub¬ 
scribed,”  explains  Bill  South- 
worth,  chairman  and  CEO  of 
Harvard. Net,  an  ISP  in  Boston 
that  specializes  in  DSL  access. 
“And  it  works  as  long  as  there 
is  enough  capacity  so  aggregat¬ 
ed  traffic  doesn’t  get  throttled.” 

When  bandwidth  through 
the  service  provider  network  is 
truly  guaranteed,  customers 
have  to  pay.  For  example, 
UUNET’s  UULink  DSL  Internet 
access  costs  $500,  $600  and 
$900  per  month  for  1 28K,  364K 
and  768K  bit/sec  of  guaranteed 
bandwidth,  respectively. 

Low-cost  DSL  services,  such 
as  the  rock-bottom  $39  per 
month  SBC  Communications 
charges  for  a  service  supporting 
1.5M  bit/  sec  downloads,  don't 
come  with  such  guarantees. 


Track  your  DSL  bandwidth 


What's  a  good  number? 

DSL  provider  NorthPoint 
Communications  oversub¬ 
scribes  its  trunks  by  a  measure 
of  2  to  1,  meaning  the  band¬ 
width  coming  into  a  network 
trunk  is  twice  what  the  trunk 
can  bear.  That  method  works 
without  degrading  customer 
service  because  in  practice,  all 
customers  aren’t  using  their 
lines  at  the  same  time.  “That 
ratio  is  very  conservative.  We 


are  not  even  close  to  dropping 
a  packet,”  says  John  Stormer, 
NorthPoint’s  vice  president  of 
marketing. 

GTE,  which  has  done  some 
of  the  most  thorough  real- 
world  DSL  testing,  says  that  10- 
to-1  oversubscription  still  pro¬ 
vides  full  throughput  to  cus- 

■  The  bach- 
haul  could 
be  oversub¬ 
scribed  by 
lOO  to  1 
because 
not  all  the 
customers 
would  be 
on  at  once. 

Dale  Veeneman,  senior 
principal  member  of 
technical  staff,  GTE  Labs 

tomers  95%  of  the  time,  even  if 
they  are  all  surfing  the  Internet 
simultaneously.  That’s  because 
even  during  heavy  Web  surfing, 
the  link  is  idle  much  of  the 
time,  according  to  Dale  Veene¬ 
man,  senior  principal  member 


of  technical  staff  at  GTE  Labs. 

With  a  group  of  casual  Inter¬ 
net  users  as  customers,  the 
backhaul  could  be  oversub¬ 
scribed  by  100  to  1  because 
not  all  the  customers  will  be  on 
at  once,  Veeneman  says. 

The  ISP  link 

But  there  are  other  potential 
oversubscription  bottlenecks, 
Veeneman  warns. 

Often  an  ISP  offers  DSL 


access  but  has  another  carrier 
set  up  the  DSL  links.  Customer 
traffic  is  concentrated  onto  an 
oversubscribed  link  into  the 
DSL  provider’s  network,  and 
then  aggregated  again  onto  an 
oversubscribed  link  to  the  ISP 

Customers  need  to  be  aware 
of  aggregation  practices  into 
and  out  of  the  DSL  carrier  net¬ 
work, Veeneman  says. 

Harvard. Net’s  Southworth 
says  he  is  always  buying  more 
bandwidth  for  Internet  links  to 
Emit  oversubscription  and  pre¬ 
vent  service  degradation. 

Because  there  are  multiple 
possible  choke  points,  cus¬ 
tomers  need  to  be  clear  about 
what  part  of  the  network  the 
guarantees  cover  when  they 
negotiate  SLAs,  says  Beth  Gage, 
an  analyst  with  TeleChoice,  a 
telecommunications  consult¬ 
ing  firm  in  Boston. 

“Some  SLAs  don’t  start  until 
the  switching  office,  and  some 
only  cover  the  last-mile  link,” 
she  says.  “You  need  to  go  step 
by  step  through  what  is  cov¬ 
ered,  from  physical  and  logical 
links  to  outside  events  like  acts 
of  God.” 

Gage  also  notes  that  because 
DSL  networks  are  still  being 
built,  links  that  are  engineered 
to  be  oversubscribed  may  not 
be  oversubscribed  yet.  What 
may  work  fine  today  might  de¬ 
grade  tomorrow  if 
service  providers 
don’t  adjust  as  they 
add  more. 

Customers  can 
check  end-to-end 
DSL  performance 
by  pinging  the  mail 
server  at  the  ISP 
being  accessed.The 
ping  will  measure 
round-trip  time  and 
see  if  packets  are 
dropped,  says  Mike 
Lutz,  a  former  net¬ 
work  manager  who 
researches  DSL  for 
Avalon  Networks, 
an  ISP  ut  Iowa  City, 
Iowa. 

If  the  customer 
can  find  an  FTP 
server  directly  linked  to  the 
same  ISR  downloading  a  file  can 
indicate  just  how  much  band¬ 
width  the  DSL  service  provider 
is  deUvering,  Lutz  says. 

Network  World  Senior 
Editor  Denise  Pappalardo 
contributed  to  this  story. 
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Services  based  on  digital  subscriber  line  may  start  out  fast,  but  overall  throughput 
depends  on  what  happens  at  key  aggregation  points. 


1.5M  bit/sec 


1 ,5M  bit/sec 


DSL  carrier 


1 ,5M  bit/sec 


ISP 


O  Multiple  1.5M  bit/sec 
DSL  lines  may  be 
concentrated  onto  a 
single  oversubscribed 
1 ,5M  bit/sec  trunk. 


Q  Another  potential  choke  point  is 
where  the  DSL  carrier  concen¬ 
trates  traffic  on  an  oversubscribed 
link  to  the  ISP. 


WHAT’S  WINNING: 
CABLE  OR  DSL? 


Limitations  aside,  many  telephone  companies  have 
great  expectations  for  digital  subscriber  line  (DSL) 
technology.  But  in  competition  with  cable  modems, 
to  which  it  is  most  often  compared,  DSL  is  lagging 
behind. 

At  the  moment,  cable  modem  access  to  the  Internet  is 
outstripping  DSL  by  a  ratio  of  about  10  to  1,  but  the  game 
is  still  young. 

So  little  of  either  service  has  been  sold  that  they  barely 
register  as  blips  on  the  Internet-access  radar  screen. 
Generous  estimates  put  the  U.S  cable  modem  and  DSL 
customer  total  at  about  650,000  combined. 

Gecko  Research  tallied  600,000  cable  modems  in  use  in 
the  U.S.  vs.  15  million  households  that  could  have  bought 
the  service  —  a  penetration  of  4%. 

DSL  runs  over  regular  phone  lines,  and  with  177  mil¬ 
lion  phone  lines  in  the  U.S.,  DSL  penetration  is  so  far 
below  1%  that  a  statistician  would  say  that  for  all  intents 
and  purposes  DSL  services  do  not  even  exist. 

Nevertheless,  both  technologies  hold  promise  as  high¬ 
speed  on-ramps  to  corporate  networks  and  the  Internet. 
Each  technology  has  its  strengths  and  weaknesses. 

The  main  problem  with  both  services  is  that  they 
are  not  universally  available.  A  corporate  customer  try¬ 
ing  to  piece  together  a  broadband  remote  access 
strategy  might  have  trouble  getting  either  service  for  all 
sites. 

Cable  is  plagued  by  the  problem  that  bandwidth  is 
shared  by  all  cable  modem  customers  on  a  given  network 
segment. That  means  bandwidth  available  to  any  one  cus¬ 
tomer  can  vary  widely  depending  on  how  many  other 
customers  on  that  segment  are  using  the  service  and  for 
what  purposes. 

As  the  DSL  story  (this  page)  points  out,  DSL  has  poten¬ 
tial  bandwidth  problems  of  its  own  —  you  may  not  be 
getting  the  bandwidth  you  think  you  are  due.  Fur¬ 
thermore,  the  lack  of  quality  lines  means  DSL  may  not  be 
available  to  30%  of  customers  in  certain  areas. 

To  overcome  line  problems,  some  carriers  may  offer 
lower-speed  DSL  service,  sometimes  as  low  as  128K 
bit/sec. The  upside:  Even  at  that  speed,  DSL  will  be  percep¬ 
tibly  faster  than  dial-up  modems. 

Much  of  the  future  success  of  DSL  and  cable  modems 
depends  on  the  variety'  of  services  they  will  come  to 
support. 

For  example,  cable  and  DSL  vendors  are  working  on 
augmenting  data  services  with  voice.  Some  forms  of  DSL 
already  support  one  voice  channel,  but  vendors  arc  com¬ 
ing  out  with  gear  that  can  stuff  up  to  15  digital  voice 
channels  into  a  single  DSL  stream. 

Cable  providers  are  also  investing  heavily  in  upgrading 
their  networks  to  support  telephony,  but  they  are  at  a  dis¬ 
advantage  because  they  lack  experience  with  telephone 
switching  and  billing. 

Beyond  technical  aspects,  cable  and  DSL  are  coming 
closer  in  price.  Service  providers  in  both  camps  now 
offer  Internet  access  for  as  low  as  $40  to  $60  per  month 
for  basic  service. 

—  Tim  Greene 
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By  the  numbers 

Worldwide  Layer  3  switched  Ethernet 
market  share  for  1998 


Company 

Revenue 

Ports 

Bay/Nortel 

36.8% 

29.1% 

3Com 

19.4% 

12.3% 

Cabletron 

7.9% 

12.4% 

Extreme 

7.6% 

19.9% 

Cisco 

7.2% 

3.2% 

Lucent 

2.1% 

1.1% 

Xylan 

1.9% 

3.7% 

FORE 

1.7% 

1.5% 

Sumitomo 

1.3% 

1.1% 

Intel 

1.3% 

2.9% 

Other 

12.8% 

12.8% 

Total  revenue:  $637.4  million 
Total  ports:  1,166,200 

SOURCE:  DELL  'ORO,  P0RT0LA  VALLEY.  CALIF. 


Acceiar, 

continued  from  page  1 

Gigabit  Ethernet  links. 

Nortel  would  not  reveal 
details  about  the  Acceiar 
8000  last  week,  so  backplane 
speeds,  port  densities,  pricing 
and  availability  could  not  be 
learned  by  press  time.  But 
sources  say  Nortel  plans  to 
scale  the  switch  to  support 
more  than  100  Gigabit  Ether¬ 
net  ports,  between  240  and 
384  10/100  ports  and  200 
million  packet/sec. 

By  contrast,  Cisco  s  Catalyst 
8540  is  a  13-slot,  40G  bit/sec 
switch  that  forwards  24  mil¬ 


lion  packet/sec.  It  supports  up 
to  128  routed  10/100  ports  or 
16  routed  Gigabit  Ethernet 
ports,  according  to  Cisco. 

The  Catalyst  8540  began 
shipping  late  last  year. 

Pricing  strategy 

Sources  also  say  Nortel  will 
offer  the  Acceiar  8000  at  a 
very  aggressive  price  in 
order  to  win  back  business 
from  users  who  have  opted 
for  products  from  Cisco, 
Extreme  Networks,  Foundry 
Networks  and  Packet 
Engines.  Currently,  industry 
average  pricing  for  Layer  3 
10/100  and  Gigabit  Ethernet 


backbone  switch  ports 
is  about  $600  and 
$2,000,  respectively. 

Nortel  has  to  be 
aggressive  in  pricing  to 
steal  customers  away 
from  Cisco,  says  Todd 
Hanson,  an  analyst  at 
Dataquest  in  San  Jose. 

As  for  the  configura¬ 
tion  of  the  switch,  two 
of  the  Acceiar  8000’s 
slots  will  house  redun¬ 
dant  switching  fabrics, 
sources  say. 

The  remainder  will 
house  Layer  2  10/100 
and  Gigabit  Ethernet 
modules,  and  ATM 
blades,  they  say. 

Layer  3  capabilities 
will  be  isolated  on  the 
switch  fabric  modules  to 
achieve  telco-like  redundancy 
and  centralized  control,  sources 
say.  The  switch  controllers  may 
also  sport  up  to  two  Layer  2  or 
Layer  3  Gigabit  Ethernet  or  ATM 
uplinks,  they  say. 

The  eight  user  slots  will 
house  modules  that  perform 
Layer  2  switching  at  wire 
speed,  sources  say.  The 


Acceiar  8000  will  also  recog¬ 
nize  Layer  4  information  so 
traffic  can  be  prioritized  and 
forwarded  based  on  particular 
applications. 

The  Acceiar  8000’s  ATM 
component  will  come  from 
Nortel’s  existing  ATM  technol¬ 
ogy,  but  not  from  its  4-year-old 
Centillion  switch,  analysts  say. 


“If  you  look  at  the  Centillion 
architecture,  it  was  great  for 
what  it  was.  But  the  only  place 
where  it  still  is  doing  really 
well  is  in  a  lot  of  token¬ 
ring  installations,”  says  an 
industry  analyst  who  request¬ 
ed  anonymity.  “Then  again,  if 
you’re  only  interested  in  token¬ 
ring  switching,  you’re  paying  a 
lot  for  the  ATM  architecture.” 

Broader  plan 

Eventually,  Nortel  will  add 
ATM  technology  from  its 
Passport  switches  to  the 
Acceiar  line,  analysts  say. 

The  Acceiar  8000  will  be 
part  of  a  broader  enterprise 
network  rollout  from  Nortel 
that  is  also  expected  to 
include  WAN  modules  for  the 
Acceiar  1200;  a  high-density 
10/100  and  Gigabit  Ethernet 
aggregation  and  distribution 
switch  to  go  up  against 
Cisco’s  Catalyst  6000;  and 
ATM  uplinks  for  the  Bay- 
Stack  450.  3 
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i  “We’re  starting  to  transition 
our  wiring  closets  to  giga¬ 
bit,  anti  we  really  need! 
something  with  higher  den¬ 
sity  in  the  core.” 

Miguel  Corteguera,  assistant  director  for  college  network 
services,  Miami-Dade  Community  College 


Nortel, 

continued  from  page  1 

result  in  a  blade,  or  special¬ 
ized  software,  for  Nortel  divi¬ 
sion  Bay  Networks’  Acceiar 
switches. 

Nortel’s  aim  is  to  give  the 
Acceiar  line  the  ability  to  effi¬ 
ciently  direct  Web  traffic.  At 
first,  Nortel  will  sell  IPivot 
appliances  alongside  the  Ac¬ 
ceiar  line,  sources  confirm. 
The  next  step  will  be  to  trans¬ 
form  core  IPivot  hardware 
into  a  blade  that  plugs  into 
the  Acceiar  switches. 

Eventually,  Nortel  may  take 
the  software  code  from  the 
IPivot  Intelligent  Broker 
device  and  plug  it  right  into 
the  Acceiar  switches,  the 
sources  say.  That  way,  every 
switch  will  have  the  ability  to 
balance  Web  traffic. 

Nortel  and  IPivot  refuse  to 
comment  on  the  deal,  which 
is  expected  to  be  revealed 
at  the  CeBit  trade  show  in 
Hannover,  Germany  later  this 
month.  Nortel  is  expected  to 
ship  the  devices  by  the  end 
of  March. 

Nortel  is  not  far  behind  the 
other  three  top  hardware 
players.  3Com  has  yet  to  flesh 
out  its  load-balancing  strate¬ 
gy,  which  largely  consists  of 
recommending  that  cus¬ 


tomers  tap  the  load-balancing 
features  built  into  Windows 
NT.  Cisco  has  long  sold 
its  Local  Director,  but  as  is 
the  case  with  some  other 
Cisco  products,  customers 
have  complained  about  high 
prices.  Cabletron,  meanwhile, 
last  month  struck  a  deal  to 
sell  load-balancing  products 
from  F5  Labs  along  with  its 
SmartSwitch  Router  line.  Like 


the  Acceiar,  the  SmartSwitch 
is  a  high-end  Layer  3/Layer  4 
chassis-based  switch  that  sup¬ 
ports  Gigabit  Ethernet. 

Much  like  Nortel’s  report¬ 
ed  strategy,  Cabletron’s  plan 
is  to  take  code  from  F5  and 
put  it  into  the  SmartSwitch, 
company  officials  say. 

Load-balancing  devices  dis¬ 
tribute  incoming  Web  traffic 
among  servers.  Companies 
can  perform  load  balancing 


through  a  black  box,  such 
as  IPivot’s  Intelligent  Broker, 
or  through  a  Layer  4  switch, 
such  as  Alteon’s  Acedirector 
or  Foundry  Networks’  Server- 
Iron.  Intelligent  Broker  only 
parses  incoming  traffic;  it 
doesn’t  forward  it.  The  IPivot 
products  must  be  attached  to 
a  forwarding  device,  such  as  a 
switch  or  a  router. 

IPivot  boxes  will  connect  to 
the  Acceiar  switch 
via  a  100Base-T  link. 
User  requests  —  in 
the  form  of  TCP/IP 
packets  —  will 
enter  the  Acceiar 
switch,  which  will 
pass  them  off  to  the 
IPivot  box.  The  box 
will  decide  which 
server  to  send  the 
requests  to  based  on 
a  number  of  parame¬ 
ters,  including  traffic 
and/or  application  type. 
Intelligent  Broker  will  then 
pass  the  requests  back  to  the 
Acceiar  along  with  the  appro¬ 
priate  server  IP  address  in  the 
packet  headers. 

(  By  year-end,  the  IPivot 
boxes  should  be  able  to 
support  Gigabit  Ethernet 
connections. 

Bay  is  expected  to  use  the 
latest  IPivot  devices,  which 
will  be  announced  in  a  cou¬ 


ple  of  weeks.  The  new  appli¬ 
ances  from  IPivot  have  a  com¬ 
pletely  revamped  hardware 
architecture.  IPivot’s  upcom¬ 
ing  Intelligent  Broker  7000 
uses  Layer  7  information  to 
perform  content-aware  load 
balancing.  That  ability  means 
it  can  peer  further  into  a 
packet  to  distribute  traffic  by 
URL  or  transaction  type. 
Layer  4  load  balancers  can 
only  see  deep  enough  to 
identify  the  type  of  traffic, 
such  as  whether  it’s  File 
Transfer  Protocol  or  HTTP. 

Nortel  plans  to  resell  Intel¬ 
ligent  Broker  4000,  7000 
and  7000m.  The  7000  series 
uses  Layer  7  information 
to  load  balance  by  URLs 
among  geographically  distrib¬ 
uted  servers. 

The  use  of  Layer  7  for  load 
balancing  is  somewhat  con¬ 
troversial.  While  there’s  no 
question  that  Layer  7  support 
gives  a  device  more  infor¬ 
mation  than  is  garnered  at 
Layer  4,  there’s  some  debate 
as  to  whether  that  informa¬ 
tion  is  worth  the  perfor¬ 
mance  hit. 

The  real  value  in  load  balanc¬ 
ing  at  Layer  7  is  the  ability  to 
prioritize  user  requests  by 
application.  For  example,  you 
could  route  revenue-producing 
requests  from  e-commerce 


sites  to  faster  servers  and 
send  people  who  are  just 
browsing  to  a  slower  server. 
But  looking  deeper  into  the 
packet  also  means  slightly 
slower  performance  and 
higher  cost.  “At  the  moment, 
there  aren’t  a  large  number  of 
really  compelling  applica¬ 
tions,”  says  Peter  Christy,  prin¬ 
cipal  analyst  at  Collaborative 
Research. 

Up  and  coming 

IPivot  is  a  promising  start¬ 
up  based  in  San  Diego.  Brett 
Helm,  IPivot’s  president  and 
CEO,  was  vice  president  and 
general  manager  for  @Work, 
a  division  of  the  @Home 
cable  service  company. 

So  far,  IPivot  has  secured 
nearly  $15  million  in  two 
rounds  of  financing.  Backers 
include  Doll  Capital  Manage¬ 
ment  and  Crosspoint  Venture 
Partners. 

Traffic  management,  which 
includes  load  balancing,  is 
a  hot  market  that  could 
grow  from  $132  million  in 
1998  to  $1  billion  by  2002, 
according  to  Collaborative 
Research.  Analysts  say  they 
wouldn’t  be  surprised  to  see 
load-balancing  companies  get 
snapped  up  by  more  estab¬ 
lished  network  equipment 
players  this  year.  3 


Nortel  will  be  rebranding  IPivot's  Intelligent 
Broker  load  balancer  for  its  Acceiar  line. 
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Branch  offices  get  headquarters-style  voice  featur 

MCK  Communications  device  puts  full-featured  PBX  support  in  remote  offices. 


BY  DAVID  ROHDE 

LOS  ANGELES  —  Bringing 
headquarters-style  voice  fea¬ 
tures  to  the  remote  branch 
office  is  the  motive  behind 
a  new  product  from  MCK 
Communications. 

At  this  week  s  Computer 
Telephony  Expo,  MCK  of 


BY  DENI  CONNOR 

PALM  SPRLNGS,  CALIF.  — 
Intel's  64-bit  Merced  chip  is 
supposed  to  ship  by  the  mid¬ 
dle  of  next  year,  but  it  will  be  a 
good  deal  longer  than  that 
before  today’s  32-bit  world 
disappears. 

Attendees  of  Intel’s  Develo¬ 
per  Forum  (IDF)  last  week 
were  excited  about  the  move 
from  32  to  64  bits.  But  the 
enthusiasm  was  somewhat 


dampened  by  the  reality  that 
most  software  development 

—  and  most  low-end  servers 

—  will  revolve  around  the 
tried-and-true  32-bit  architec¬ 
ture  for  years  to  come. 

Intel  has  pledged  to  boost 
32-bit  performance  to  the 
limit,  even  after  its  high-end 
line  leaps  to  64-bits.  “We  will 
continue  to  invest  in  what¬ 
ever  the  laws  of  semiconduc¬ 
tor  physics  will  allow  on  a  32- 
bit  architecture  for  servers 
and  workstations,”  says  John 
Miner,  corporate  vice  presi¬ 
dent  and  general  manager  for 
the  Enterprise  Server  Group 
at  Intel. 

“As  long  as  we  can  deliver 


Newton,  Mass.,  will  unveil  the 
Branch  Office  EXTender  6000, 
a  device  that  transports  PBX 
features  to  small  remote  offices 
over  frame  relay,  ISDN,  digital 
subscriber  line,  fractional  T-l 
and  other  WAN  links. 

Deployed  in  pairs  —  one  at 
the  PBX  site  and  one  at  a  small 
branch  office  —  the  EXTender 


benefit  and  value  and  meet  cus¬ 
tomer  needs,  32-bit  processors 
will  be  available.  We  will  intro¬ 
duce  Cascades  [a  32-bit  up¬ 
grade]  at  the  end  of  this  year 
and  Foster  [another  32-bit  up¬ 
grade]  next  year,  and  then  we 
show  [on  our  roadmap]  some 
unnamed  bubbles  beyond  that 
into  2000,”  he  says. 

Equity  protection 

Today’s  programs  will  run 
fine  on  Merced.  However,  to 


take  advantage  of  the  full 
speed  boost,  software  will 
need  to  be  rewritten.  Many 
programs,  including  word 
processing  and  low-end  serv¬ 
er  applications,  don’t  really 
need  a  64-bit  boost.  Others, 
such  as  databases  and  techni¬ 
cal  workstation  programs, 
will  benefit  greatly. 

One  management  software 
vendor  has  a  dual  strategy. 
“Bindview  will,  of  course,  con¬ 
tinue  to  support  IA-32,  as  well 
as  LA-64  platforms,”  says  Scott 
Hutchinson,  lead  developer  for 
Bindview  Development,  one 
of  the  few  software  vendors 
viewing  the  wares  at  IDE 

Unlike  the  experience  of 


6000  provides  the  full  feature 
set  of  the  PBX  and  its  peripher¬ 
als,  such  as  voice  mail  systems, 
to  branch-office  end  users.  As  a 
result,  end  users  can  dial  co¬ 
workers  using  only  four  or  five 
digits,  or  can  transfer  voice  mail 
messages  as  if  they  were  in  the 
office  themselves. 

In  addition,  end  users  desig- 


others  interviewed,  develop¬ 
ers  at  Bindview  have  found 
the  move  to  64  bits  to  be  rela¬ 
tively  painless.  “In  the  develop¬ 
ment  of  our  Windows  NT 
products,  we’ve  seen  that  it  is 
basically  a  simple  recompile  to 
move  Bindview  EMS  from  one 
platform  to  another,”  Hutch¬ 
inson  says. 

What  flavor  to  serve? 

Some  PC  server  vendors  are 
also  eyeing  a  dual  strategy.  Peter 
Glasko  wsky, 
senior  analyst  for 
the  Microproces¬ 
sor  Report  in 
Sunnyvale,  Calif., 
says  that  low-end 
servers  will  re¬ 
main  32-bit,  while 
high-end  servers, 
such  as  Hewlett- 
Packard’s  LXr- 
8000,  will  move 
to  64-bit.  “If  you 
look  at  entry-level 
servers,  the  pric¬ 
ing  for  Merced 
does  not  enter 
acceptable  ranges  until  2003  or 
2004,  and  it  could  be  a  year 
or  two  longer  than  that,” 
Glaskowsky  says. 

Compaq  and  Intel  are  in  gen¬ 
eral  agreement  on  the  direction 
of  microprocessors.  “Compaq 
will  develop  on  both  LA-32  and 
IA-64  platforms,”  says  Paul 
Santeler,  enterprise  x86  seg¬ 
ment  director  at  Compaq. 
“When  Merced  is  available,  we 
will  ship  our  high-end  Proliant 
servers  on  Merced,  reserving 
32-bit  processors  for  our  low- 
and  middle-end  servers.  As 
price  performance  levels  out  in 
the  years  after  2000,  we  will 
start  to  migrate  our  mid-range 
Proliants  to  LA-64.”  □ 


nated  as  primary  or  back-up 
call  center  agents  can  receive 
computer-telephony  features 
common  to  800-number  cen¬ 
ters,  such  as  customer  service 
data  about  callers. 

The  device  fills  a  hole  in 
PBX  internetworking,  accord¬ 
ing  to  analysts.  The  major  PBX 
vendors  have  branch-office 
models  of  their  flagship  PBXs 
but  not  at  price  for  small 
offices. They  also  offer  feature- 
extension  devices  —  some 
manufactured  by  MCK  —  tar¬ 
geted  at  individual  telecom¬ 
muters  rather  than  a  branch- 
office  workgroup. 

By  contrast,  key  systems  — 
basic  telephony  switch  sys¬ 
tems  for  small  offices  that  the 
EXTender  6000  can  replace  — 
don’t  offer  the  same  feature 
set  as  PBXs. 

“The  internetworking  com¬ 
panies  have  delivered  remote 
data  access  to  branch  offices, 
but  voice  applications  have 
fallen  short,”  says  Nick  Lippis, 
president  of  the  consulting 
firm  Strategic  Networks. 

The  EXTender  6000  pro¬ 
vides  network  administrators 
with  a  choice  of  voice-com¬ 
pression  algorithms,  enabling 
support  for  up  to  eight  branch 
employees  over  a  single  ISDN 
Basic  Rate  Interface  or  two  DS0 
64K  bit/sec  lines.  As  a  result, 
the  device  will  reduce  the 
WAN  bandwidth  required, 
Lippis  says. 

The  EXTender  6000  is  cur¬ 
rently  available  to  work  with 
Lucent  and  Nortel  Networks 
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PBXs,  with  support  for 
other  manufacturers’  models 
planned.  The  list  price  is 
$3,895,  or  $7,790  per  pair. 
Trade  discounts  from  MCK  dis¬ 
tributors,  including  some  big 
focal  exchange  carriers  and 
Williams  Communications,  are 
expected  to  offer  prices  below 
$7,000  per  pair,  according  to 
MCK  President  Woody  Benson. 

Big  guys  opening  up 

In  a  development  related  to 
the  improvement  of  nonpropri¬ 
etary  converged  networks,  at 
least  four  companies  —  Lucent, 
Motorola,  Ericsson  and  Natural 
Microsystems  (NMS)  —  late  last 
week  were  expected  to  make 
portions  of  their  source  code 
for  carrier-class  products  avail¬ 
able  as  open  source. 

The  move,  spearheaded  by 
NMS  —  a  Digital  Signaling 
Processor  board  manufacturer 
and  computer-telephony  soft¬ 
ware  developer  —  is  part  of  the 
push  for  more  open  platforms 
in  the  traditionally  proprietary 
telecom  world. 

NMS  will  provide  code  from 
its  Alliance  Generation  prod¬ 
uct  suite,  which  includes  hot- 
swap  CompactPCI  capability 
for  Windows  NT  and  Unix 
platforms.  CompactPCI  is  a 
ruggedized  hardware  plat¬ 
form  designed  for  carrier 
environments. 

The  CompactPCI  hot  swap 
specification  defines  how  to 
install  and  remove  boards 
without  bringing  down  a 
system.  □ 


following  criteria: 

1)  Have  site  purchasing  influence 

2)  Are  involved  in  the  purchase  of  network  products  and  ser¬ 
vices. 

3)  Have  multi-platform  networks  installed  or  planned  (includ¬ 
ing  network  architectures,  LAN  operating  systems  and  LAN 
environments). 
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Intel's  Merced  will  coexist  with  32-bit  chips 


"We  will  continue 
to  invest  in  whatever 
the  laws  of  semi¬ 
conductor  physics 
will  allow  on  a  32-bit 
architecture  .  .  ." 

John  Miner,  vice  president  and  general 
manager  for  the  Enterprise  Server  Group,  Intel 
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Banting,  raving  and  chasing  bills 


t  all  started  when  I  received 
one  of  my  telephone  bills.  Last 
December  I  had  my  fax  line  con¬ 
verted  to  digital  subscriber  line 
(DSL),  and  there  were  several 
things  about  the  bill  that  needed 
further  explanation. 

First  there  was  the  question 
of  why  the  service  cost  $  1 5 
more  than  Pacific  Bell  had  said 
it  would.  And  why  did  I  appar¬ 
ently  have  both  MCI  and  AT&T 
as  long-distance  carriers?  And 
finally,  why  was  some  outfit 
named  OAN  billing  me  $3. 2  5  on 
behalf  of  some  other  company 
named  IntelNet  for  a  service 
charge  and  a  “PRESUB  CHRG” 
(whatever  that  was)? 

Lucy,  the  Pacific  Bell  customer 
service  representative  who  field¬ 
ed  my  cranky  call, 
was  extremely  help¬ 
ful  and  charming  and 
partially  sorted 
things  out.  I  have  no 
complaints  about  her 
—  indeed,  I  com¬ 
mended  her  to  her 
supervisor.  But  nei¬ 
ther  Lucy  nor  her 
supervisor  could 
explain  all  of  the 
items  on  the  bill. 

The  overcharging, 
for  example,  remains 

mark  a  mystefy- But  {t 

became  a  non-issue  when  Lucy 
GIBBS  told  me  paCBell  had  reduced 

the  service  price  by  more  than 
half.  Of  course,  it  wasn’t  as  sim¬ 
ple  as  that. 

It  turns  out  you  don’t  get 
the  new  price  unless  you  ask 
for  it!  PacBell  apparently  sent  me 
a  notice  about  this  but  I  never 
saw  it  —  my  wife  usually  handles 
the  bills,  and  how  should  she 
know  what  DSL  is?  I  asked  why 
PacBell  didn’t  just  apply  the  new 
pricing  to  existing  DSL  accounts, 
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and  I  was  told  it  was  too  expen¬ 
sive  to  do  so.  Huh? 

<rant>How  the  heck  could 
sending  out  pieces  of  paper  to 
thousands  of  customers  and  then 
fielding  their  calls  be  less  expen¬ 
sive  than  just  giving  everyone  the 
new  DSL  pricing?  And  did  PacBell 
think  anyone  would  call  up  and 
complain  that  they  wanted  to  pay 
the  old  price?  </rant> 

We  did  establish  that  the  AT&T 
charge  was  due  to  the  fact  that 


the  company  was  automatically 
selected  by  PacBell  to  be  my 
long-distance  carrier. 

Even  though  I  didn’t  make  any 
AT&T  long-distance  calls,  AT&T 
charges  a  minimum  of  $3  (plus 
tax)  per  month  to  be  your  long¬ 
distance  carrier. 

I  didn’t  make  any  AT&T  long¬ 
distance  calls  because  I  opted 
to  dial  10-10-222,  which  is  a  dis¬ 
count  MCI  service. That  account¬ 
ed  for  both  MCI  and  AT&T  both 
showing  up  on  my  bill.  I  can¬ 
celled  my  AT&T  “dial  one”  service 
on  the  spot. 

<rant>With  all  of  the  U.S. 
Department  of  Justice’s  purport¬ 
ed  interest  in  consumer  rights 
and  monopolistic  practices,  how 
is  it  that  AT&T  can  charge  you  for 
not  using  its  service?  I  find  it 
hard  to  believe  there  is  a  signifi¬ 
cant  cost  to  supplying  no  service, 
yet  AT&T  is  allowed  to  levy  a 
charge  on  the  off-chance  you 
might  use  its  switches.  Come  on 
Ms.  Reno  &  Co.,  and  for  that  mat¬ 
ter,  all  of  you  people  at  the  FCC 
clown  show.  Do  something  for 
consumers  that  really  means 
something  and  curb  the  rapa¬ 
cious  telcos.  </rant> 

The  OAN  charge  was  the 
stump-the-band  item.  OAN  is  a 
billing  aggregator  and  it  passes 
billing  items  to  PacBell,  as  it  did 
in  this  case  for  IntelNet.  PacBell 
had  no  idea  what  exactly  the 
charges  were  for.  That  is  the  most 
ridiculous  thing  I  have  heard  in  a 
while  (although  the  question  of 
what  “is”  is,  beats  it  hollow). 

<rant>It  seems  to  be  a  quintes- 
sentially  anticustomer  service  to 
just  accept  third-party  charges 
without  checking  their  validity, 
putting  the  burden  completely 
on  the  consumer  to  track  down 
the  charges.</rant> 

There’s  more  on  this  matter,  so 
next  week  my  conversations  with 
OAN,  IntelNet  and  other  billing 
issues.  (Oh,  we  finally  closed  the 
voting  on  the  corporate  vigilan- 
tism  issue,  and  roughly  20%  of 
you  think  it’s  OK  to  do  something 
physical  to  hackers  or  their  equip¬ 
ment.  We  need  to  talk  about  this.) 

Discuss  what  your  bill  is  (or 
what  Bill’s  “is"  is)  at  nwcolumn 
@gibbs.com  or  (800)  622-1108, 
Ext.  7504. 


Typos  happen  . . .  ask  any  journalist. 

Or  ask  my  childhood  neighbor,  Mr.  Vigorito, 
whose  clothing  store  once  placed  a  news¬ 
paper  ad  for  "knit  shirts,"  only  to  have  a 
typesetter  drop  that  mission-critical  "r"  from 
"shirts."  My  11 -year-old  friends  couldn't 
stop  giggling,  although  businessman  Vigorito 
was  not  at  all  amused. 

You  can  also  presume  they  aren't  laugh¬ 
ing  these  days  at  E-Trade,  Infoseek,  Lycos, 

Amazon.com  or  virtually  any  other  online 
concern  that  has  made  a  big  name  on  the 
Internet.  Typos  are  taking  a  toll  on  the 
branding  of  these  famous  companies  for  two 
reasons:  Some  Web  surfers  couldn't  spell  URL  if  you  spotted  'em  the 
"u"  and  the  "r,"  and  the  'Net  has  no  shortage  of  weasels  willing  to 
exploit  that  fact. 

Which  brings  us  to  the  so-called  “typo  Web  site,”  a  URL  intention¬ 
ally  designed  to  divert  the  alphabetically  challenged  from  their  intend¬ 
ed  destination  to  someplace  else.  That  someplace  else  is  usually  a 
porn  site  or  fly-by-night  way  station  with  links  to  porn  sites. 

These  sites  are  not  a  new  phenomenon,  and  the  Internet  commu¬ 
nity's  grown-ups  are  searching  for  a  fix  as  they  overhaul  the  Domain 
Naming  System.  However,  a  recent  survey  by  Solid  Oak  Software  — 
maker  of  Cybersitter  —  shows  that  the  sheer  number  of  these  typo 
"para-sites"  may  be  greater  than  most  realize.  Solid  Oak  identified 
literally  thousands  of  intentionally  misspelled  URLs.  Finding  others 
isn't  hard,  though  you  may  want  to  wait  until  you  get  home  to  try. 

A  few  examples:  Cisko.com?  Porn  site.  Ecxite.com?  Porn  site. 
2com.com?  Porn.  Anazon.com?  Porn.  Hotmale.com?  C'mon,  what  do 
you  think?  Infoseek  alone  has  at  least  five  "typo  sites." 

Can  Web  surfers  possibly  misspell  famous  URLs  often  enough  to 
make  this  scam  a  traffic  generator?  Well,  maybe.  A  Scottish  computer 
consultant  tells  me  his  Macdonalds.com  site  has  had  36,000  hits  in 
three  months.  A  guy  who  registered  a  misspelling  of  monster.com  in 
anticipation  of  the  job-search  company's  splashy  Super  Bowl  ads 
reported  400  hits  . . .  just  during  the  game. 

Isn't  this  trademark  infringement?  Oftentimes  yes,  says  David 
Maher,  a  Chicago-based  attorney.  Among  the  few  dozen  test  cases 
that  exist,  McDonald’s,  Mattel,  Bally's  and  even  Playboy  (irony  of 
ironies)  have  successfully  defended  their  URLs,  Maher  says. 

But  not  even  this  country  has  enough  corporate  lawyers  to  squash 
the  para-sites  one  by  one. 

You  might  think  domain  name  registrar  Network  Solutions,  Inc. 
would  stop  them  by  simply  rejecting  the  most  bogus  names.  NSI,  how¬ 
ever,  claims  it  has  no  choice  but  to  keep  on  cashing  the  checks  from 
these  typo  artists. 

The  good  news  is  that  help  is  supposedly  on  the  way  from  the 
would-be  fixers  of  the  domain  name  mess:  the  Internet  Corporation  for 
Assigned  Names  and  Numbers,  and  the  World  Intellectual  Property 
Organization.  The  latter  may  issue  recommendations  addressing  these 
trademark  issues  as  soon  as  this  week. 

Here's  hoping  they  contain  a  dose  of  "just  say  no"  common  sense. 
Meanwhile,  make  sure  your  kids  know  how  to  spell  "Beanie  Babies." 

Who's  this  new  Buzz?  Writing  a  column  about  the  Internet  has 
been  a  dream  of  mine  since  way  back  when —  OK,  more  precisely, 
since  I  first  learned  that  my  longtime  friend  Chris  Nerney  was  writing 
one  called  "'Net  Buzz.”  "How  hard  can  it  be?"  I  recall  thinking. 

We're  about  to  find  out,  as  Nerney's  departure  for  internet.com  has 
left  "Buzz"  in  my  hands.  Needling  aside,  his  will  be  roomy  sneakers  to  fill. 

The  good  news  for  readers  —  at  least  I  hope  it's  good  news  —  is 
that  I've  done  this  kind  of  gig  before,  as  an  editorial  writer  and  colum¬ 
nist  for  a  daily  newspaper.  The  subject  matter  there  was  primarily 
human  interest  and  politics. ...  Any  shortage  of  those  on  the  'Net? 
Please  let  me  know  how  I'm  doing. 

Contact  Paul  McNamara  at pmcnamara@nww.com  or  (508) 
820-7471. 


PAUL 

MCNAMARA 
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We  don’t 
follow  protocols 

we  desian  them. 


Get  cutting-edge  technology  solutions  here 


NetWorld+Interop,  the  definitive  networking  event  for  the  enterprise 
and  service  provider  market,  attracts  the  visionaries  and  experts  of 
the  networking  world.  These  professionals  give  you  the  technical 
knowledge  you  can  use  today  to  ensure  your  future  success. 

Four  focused  conferences  cover  the  entire  spectrum  of  education¬ 
al  needs  of  enterprise  professionals.  The  General  Conference 
addresses  core  public  and  private  networking  technologies  that 
drive  enterprise  networks,  while  the  Community  and  Engineers 
Conferences  focus  on  market-specific  topics  such  as  voice,  video 
and  data  convergence  and  never  before  seen  broadband  access 
technologies.  And  new  to  NetWorld+Interop,  EXPO  COMM  the  inter¬ 


national  leader  in  telecommunications  events,  will  provide  a  unique 
program  for  the  service  providers. 

On  the  interactive  show  floor  you  will  get  information  you  need  on 
key  enterprise  networking  technologies  and  products  from  more 
than  600  of  the  world’s  leading  vendors  all  in  one  place,  under  one 
roof.  This  is  your  chance  to  evaluate  products  from  several  top  ven¬ 
dors  simultaneously. 

If  you  need  answers  today,  there  is  only  one  technical  event  that  will 
provide  you  with  the  most  current  information:  NetWorld+Interop 
and  EXPO  COMM  99  Las  Vegas. 
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Conference  and  Exhibition  May  10-14,  1999  Las  Vegas 
Visit  www.interop.com  or  call  1-888-886-4057 
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'estimated  reseller  price  to  end  usets  for  IBM  PC  300GL  model  6287-41 U ;  monitor  shown  is  IBM  G-54  with  15'  screen  and  13.7'  viewable  image,  starting  at  $239;  certain  features  described  below  are  available  lor  an  additional  charge.  Actual  prices 
rr.ay  vary  MH?  denotes  microprocessor  internal  clock  speed  only;  other  factors  may  also  affect  application  performance.  PCs  in  this  ad  include  an  operating  system.  IBM  product  names  are  trademarks  of  International  Business  Machines 
Corporation  Wake  on  LAN  is  a  product  of  IBM/Intel  Advanced  Manageability  Alliance  and  is  a  trademark  of  IBM  Corporation.  Intel,  the  Intel  Inside  logo  and  Pentium  are  registered  trademarks  of  Intel  Corporation.  ©  1999  IBM  Corp.  All  rights  reserved. 


pentium®][ 


limit  12,000  per  customer 


PC300GL  % 


from 

$1,135* 


Pentium*  II  processor  350  mhz 
up  to  64mb  sdram,  up  to  8.4gb 
hard  drive,  4  slots,  4  bays 


Customizable  SystemXtra™ 
financing,  service,  support 
and  training  options. 


More  is  definitely  better.  And  affordable,  even  after  you  buy.  Cost-saving, 
standards-based  management  features,  like  Wake  on  LAN’"  allow  you 
to  easily  integrate  truckloads  of  IBM  PC  300GLs  into  your  enterprise. 
www.ibm.com/ibmpc  or  call  1  800  IBM  7255,  ext.  5030. 


